Action not permitted
Modal body text goes here.
cve-2018-2783
Vulnerability from cvelistv5
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-05T04:29:44.741Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "RHSA-2018:1975", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2018:1975" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us" }, { "name": "1040697", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://www.securitytracker.com/id/1040697" }, { "name": "RHSA-2018:1724", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2018:1724" }, { "name": "RHSA-2018:1203", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2018:1203" }, { "name": "USN-3644-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred" ], "url": "https://usn.ubuntu.com/3644-1/" }, { "name": "RHSA-2018:1723", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2018:1723" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://security.netapp.com/advisory/ntap-20180419-0001/" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html" }, { "name": "RHSA-2018:1722", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2018:1722" }, { "name": "RHSA-2018:1974", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2018:1974" }, { "name": "RHSA-2018:1205", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2018:1205" }, { "name": "RHSA-2018:1721", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2018:1721" }, { "name": "103832", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/103832" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us" } ], "title": "CVE Program Container" }, { "metrics": [ { "other": { "content": { "id": "CVE-2018-2783", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "total" } ], "role": "CISA Coordinator", "timestamp": "2024-10-03T19:20:39.941493Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2024-10-03T20:19:22.002Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2018-03-27T00:00:00", "descriptions": [ { "lang": "en", "value": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2019-03-20T00:06:05", "orgId": "43595867-4340-4103-b7a2-9a5208d29a85", "shortName": "oracle" }, "references": [ { "name": "RHSA-2018:1975", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2018:1975" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us" }, { "name": "1040697", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://www.securitytracker.com/id/1040697" }, { "name": "RHSA-2018:1724", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2018:1724" }, { "name": "RHSA-2018:1203", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2018:1203" }, { "name": "USN-3644-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU" ], "url": "https://usn.ubuntu.com/3644-1/" }, { "name": "RHSA-2018:1723", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2018:1723" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://security.netapp.com/advisory/ntap-20180419-0001/" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html" }, { "name": "RHSA-2018:1722", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2018:1722" }, { "name": "RHSA-2018:1974", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2018:1974" }, { "name": "RHSA-2018:1205", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2018:1205" }, { "name": "RHSA-2018:1721", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2018:1721" }, { "name": "103832", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/103832" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "secalert_us@oracle.com", "ID": "CVE-2018-2783", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "RHSA-2018:1975", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:1975" }, { "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us", "refsource": "CONFIRM", "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us" }, { "name": "1040697", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1040697" }, { "name": "RHSA-2018:1724", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:1724" }, { "name": "RHSA-2018:1203", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:1203" }, { "name": "USN-3644-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/3644-1/" }, { "name": "RHSA-2018:1723", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:1723" }, { "name": "https://security.netapp.com/advisory/ntap-20180419-0001/", "refsource": "CONFIRM", "url": "https://security.netapp.com/advisory/ntap-20180419-0001/" }, { "name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0", "refsource": "CONFIRM", "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0" }, { "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html" }, { "name": "RHSA-2018:1722", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:1722" }, { "name": "RHSA-2018:1974", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:1974" }, { "name": "RHSA-2018:1205", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:1205" }, { "name": "RHSA-2018:1721", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:1721" }, { "name": "103832", "refsource": "BID", "url": "http://www.securityfocus.com/bid/103832" }, { "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us", "refsource": "CONFIRM", "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us" } ] } } } }, "cveMetadata": { "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85", "assignerShortName": "oracle", "cveId": "CVE-2018-2783", "datePublished": "2018-04-19T02:00:00", "dateReserved": "2017-12-15T00:00:00", "dateUpdated": "2024-10-03T20:19:22.002Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2018-2783\",\"sourceIdentifier\":\"secalert_us@oracle.com\",\"published\":\"2018-04-19T02:29:03.020\",\"lastModified\":\"2022-10-06T18:56:51.630\",\"vulnStatus\":\"Analyzed\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: Security). Las versiones compatibles que se han visto afectadas son JavaSE: 6u181, 7u161 y 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Una vulnerabilidad dif\u00edcilmente explotable permite que un atacante sin autenticar que tenga acceso a red por m\u00faltiples protocolos comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualizaci\u00f3n, inserci\u00f3n o supresi\u00f3n de datos confidenciales o de todos los datos accesibles de Java SE, Java SE Embedded y JRockit, as\u00ed como el acceso sin autorizaci\u00f3n a datos confidenciales o todos los datos accesibles de Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad aplica a la implementaci\u00f3n del cliente y el servidor de Java. Esta vulnerabilidad puede ser explotada mediante aplicaciones Java Web Start en sandbox y applets Java en sandbox. Tambi\u00e9n puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start o applets Java en sandbox, como a trav\u00e9s de un servicio web. CVSS 3.0 Base Score 7.4 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\",\"baseScore\":7.4,\"baseSeverity\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":5.2}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:N\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\",\"baseScore\":5.8},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":4.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update181:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B9A0DD9-878D-42E8-AA57-283E5D1E0A64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.7.0:update161:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AA4AF8B-2E5E-4A5E-8930-B53A01A22C78\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.8.0:update152:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2EB8815-20EE-4A0B-A001-73995114333D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update181:*:*:*:*:*:*\",\"matchCriteriaId\":\"DD3B3C9B-A53B-4921-8F5F-FF118283D958\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.7.0:update161:*:*:*:*:*:*\",\"matchCriteriaId\":\"32F5FDBE-ED30-48A9-B130-A48309C7D2CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.8.0:update152:*:*:*:*:*:*\",\"matchCriteriaId\":\"1988C207-4D9F-4FD2-9652-30CB2C65FE8C\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jrockit:r28.3.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A13AA87-5F14-4728-B317-17C3A782FA34\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D4840254-CC76-4113-BC61-360BD15582B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"85EA16E0-9261-45C4-840F-5366E9EAC5E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4F86C3C-B99C-44C6-97D7-163DC3F59687\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33C068A4-3780-4EAB-A937-6082DF847564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BBCD86A-E6C7-4444-9D74-F861084090F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51EF4996-72F4-4FA4-814F-F5991E7A8318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*\",\"matchCriteriaId\":\"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9070C9D8-A14A-467F-8253-33B966C16886\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*\",\"matchCriteriaId\":\"87D4ED85-90F6-47E6-BF08-3595DB22C7B1\"}]}]}],\"references\":[{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/103832\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.securitytracker.com/id/1040697\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1203\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1205\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1721\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1722\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1723\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1724\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1974\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1975\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20180419-0001/\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3644-1/\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]}]}}" } }
rhsa-2018_1203
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for java-1.6.0-sun is now available for Oracle Java for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 6 to version 6 Update 191.\n\nSecurity Fix(es):\n\n* OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025) (CVE-2018-2814)\n\n* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)\n\n* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)\n\n* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)\n\n* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)\n\n* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)\n\n* OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757) (CVE-2018-2815)\n\n* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2018:1203", "url": "https://access.redhat.com/errata/RHSA-2018:1203" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1567121", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567121" }, { "category": "external", "summary": "1567126", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126" }, { "category": "external", "summary": "1567351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351" }, { "category": "external", "summary": "1567537", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567537" }, { "category": "external", "summary": "1567543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543" }, { "category": "external", "summary": "1567545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545" }, { "category": "external", "summary": "1568163", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163" }, { "category": "external", "summary": "1568515", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515" }, { "category": "external", "summary": "1569204", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1203.json" } ], "title": "Red Hat Security Advisory: java-1.6.0-sun security update", "tracking": { "current_release_date": "2024-11-05T20:29:17+00:00", "generator": { "date": "2024-11-05T20:29:17+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2018:1203", "initial_release_date": "2018-04-23T17:15:36+00:00", "revision_history": [ { "date": "2018-04-23T17:15:36+00:00", "number": "1", "summary": "Initial version" }, { "date": "2018-04-23T17:15:36+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T20:29:17+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } } ], "category": "product_family", "name": "Oracle Java for Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "product": { "name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "product_id": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.191-1jpp.2.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "product": { "name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "product_id": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.191-1jpp.2.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "product": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "product_id": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.191-1jpp.2.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "product": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "product_id": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.191-1jpp.2.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "product": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "product_id": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.191-1jpp.2.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "product": { "name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "product_id": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.191-1jpp.2.el6?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "product": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "product_id": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.191-1jpp.2.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "product": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "product_id": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.191-1jpp.2.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "product": { "name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "product_id": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.191-1jpp.2.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "product": { "name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "product_id": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.191-1jpp.2.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "product": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "product_id": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.191-1jpp.2.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "product": { "name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "product_id": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.191-1jpp.2.el6?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-2783", "discovery_date": "2018-04-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1569204" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2783" }, { "category": "external", "summary": "RHBZ#1569204", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2783" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-23T17:15:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1203" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)" }, { "cve": "CVE-2018-2790", "cwe": { "id": "CWE-347", "name": "Improper Verification of Cryptographic Signature" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1568515" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2790" }, { "category": "external", "summary": "RHBZ#1568515", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2790", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2790" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-23T17:15:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1203" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)" }, { "cve": "CVE-2018-2794", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567126" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2794" }, { "category": "external", "summary": "RHBZ#1567126", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2794", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2794" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-23T17:15:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1203" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)" }, { "cve": "CVE-2018-2795", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567351" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2795" }, { "category": "external", "summary": "RHBZ#1567351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2795", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2795" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-23T17:15:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1203" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)" }, { "cve": "CVE-2018-2797", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567545" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2797" }, { "category": "external", "summary": "RHBZ#1567545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2797", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2797" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-23T17:15:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1203" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)" }, { "cve": "CVE-2018-2798", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567543" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2798" }, { "category": "external", "summary": "RHBZ#1567543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2798", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2798" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-23T17:15:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1203" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)" }, { "cve": "CVE-2018-2800", "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1568163" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2800" }, { "category": "external", "summary": "RHBZ#1568163", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2800", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2800" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-23T17:15:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1203" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)" }, { "cve": "CVE-2018-2814", "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567121" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2814" }, { "category": "external", "summary": "RHBZ#1567121", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567121" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2814", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2814" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2814", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2814" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-23T17:15:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1203" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025)" }, { "cve": "CVE-2018-2815", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567537" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2815" }, { "category": "external", "summary": "RHBZ#1567537", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567537" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2815", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2815" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2815", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2815" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-23T17:15:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1203" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757)" } ] }
rhsa-2018_1205
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for java-1.6.0-sun is now available for Oracle Java for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 6 to version 6 Update 191.\n\nSecurity Fix(es):\n\n* OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025) (CVE-2018-2814)\n\n* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)\n\n* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)\n\n* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)\n\n* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)\n\n* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)\n\n* OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757) (CVE-2018-2815)\n\n* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2018:1205", "url": "https://access.redhat.com/errata/RHSA-2018:1205" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1567121", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567121" }, { "category": "external", "summary": "1567126", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126" }, { "category": "external", "summary": "1567351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351" }, { "category": "external", "summary": "1567537", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567537" }, { "category": "external", "summary": "1567543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543" }, { "category": "external", "summary": "1567545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545" }, { "category": "external", "summary": "1568163", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163" }, { "category": "external", "summary": "1568515", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515" }, { "category": "external", "summary": "1569204", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1205.json" } ], "title": "Red Hat Security Advisory: java-1.6.0-sun security update", "tracking": { "current_release_date": "2024-11-05T20:29:48+00:00", "generator": { "date": "2024-11-05T20:29:48+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2018:1205", "initial_release_date": "2018-04-23T22:38:49+00:00", "revision_history": [ { "date": "2018-04-23T22:38:49+00:00", "number": "1", "summary": "Initial version" }, { "date": "2018-04-23T22:38:49+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T20:29:48+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.5.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.5.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.5.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.5.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } } ], "category": "product_family", "name": "Oracle Java for Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "product": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "product_id": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.191-1jpp.1.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "product": { "name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "product_id": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.191-1jpp.1.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "product": { "name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "product_id": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.191-1jpp.1.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "product": { "name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "product_id": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.191-1jpp.1.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "product": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "product_id": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.191-1jpp.1.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "product": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "product_id": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.191-1jpp.1.el7?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "product": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "product_id": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.191-1jpp.1.el7?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "product": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "product_id": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.191-1jpp.1.el7?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686" }, "product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "relates_to_product_reference": "7Client-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "relates_to_product_reference": "7Client-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686" }, "product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686" }, "product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "relates_to_product_reference": "7Server-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "relates_to_product_reference": "7Server-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686" }, "product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "relates_to_product_reference": "7Workstation-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "relates_to_product_reference": "7Workstation-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" }, "product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.5.Z" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-2783", "discovery_date": "2018-04-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1569204" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2783" }, { "category": "external", "summary": "RHBZ#1569204", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2783" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-23T22:38:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1205" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)" }, { "cve": "CVE-2018-2790", "cwe": { "id": "CWE-347", "name": "Improper Verification of Cryptographic Signature" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1568515" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2790" }, { "category": "external", "summary": "RHBZ#1568515", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2790", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2790" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-23T22:38:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1205" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)" }, { "cve": "CVE-2018-2794", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567126" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2794" }, { "category": "external", "summary": "RHBZ#1567126", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2794", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2794" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-23T22:38:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1205" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)" }, { "cve": "CVE-2018-2795", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567351" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2795" }, { "category": "external", "summary": "RHBZ#1567351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2795", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2795" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-23T22:38:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1205" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)" }, { "cve": "CVE-2018-2797", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567545" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2797" }, { "category": "external", "summary": "RHBZ#1567545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2797", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2797" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-23T22:38:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1205" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)" }, { "cve": "CVE-2018-2798", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567543" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2798" }, { "category": "external", "summary": "RHBZ#1567543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2798", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2798" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-23T22:38:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1205" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)" }, { "cve": "CVE-2018-2800", "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1568163" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2800" }, { "category": "external", "summary": "RHBZ#1568163", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2800", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2800" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-23T22:38:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1205" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)" }, { "cve": "CVE-2018-2814", "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567121" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2814" }, { "category": "external", "summary": "RHBZ#1567121", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567121" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2814", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2814" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2814", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2814" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-23T22:38:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1205" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025)" }, { "cve": "CVE-2018-2815", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567537" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2815" }, { "category": "external", "summary": "RHBZ#1567537", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567537" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2815", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2815" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2815", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2815" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-04-23T22:38:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1205" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757)" } ] }
rhsa-2018_1723
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 7 to version 7R1 SR4-FP25.\n\nSecurity Fix(es):\n\n* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)\n\n* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)\n\n* OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) (CVE-2018-2796)\n\n* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)\n\n* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)\n\n* OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) (CVE-2018-2799)\n\n* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)\n\n* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2018:1723", "url": "https://access.redhat.com/errata/RHSA-2018:1723" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1567126", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126" }, { "category": "external", "summary": "1567351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351" }, { "category": "external", "summary": "1567542", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542" }, { "category": "external", "summary": "1567543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543" }, { "category": "external", "summary": "1567545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545" }, { "category": "external", "summary": "1567546", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546" }, { "category": "external", "summary": "1568163", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163" }, { "category": "external", "summary": "1568515", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515" }, { "category": "external", "summary": "1569204", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1723.json" } ], "title": "Red Hat Security Advisory: java-1.7.1-ibm security update", "tracking": { "current_release_date": "2024-11-05T20:36:24+00:00", "generator": { "date": "2024-11-05T20:36:24+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2018:1723", "initial_release_date": "2018-05-24T19:01:34+00:00", "revision_history": [ { "date": "2018-05-24T19:01:34+00:00", "number": "1", "summary": "Initial version" }, { "date": "2018-05-24T19:01:34+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T20:36:24+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Client Supplementary (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:7" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "product": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.25-1jpp.3.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "product": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "product_id": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.25-1jpp.3.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.3.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.3.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "product": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.25-1jpp.3.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "product": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "product_id": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-plugin@1.7.1.4.25-1jpp.3.el7?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "product": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.25-1jpp.3.el7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "product": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "product_id": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.25-1jpp.3.el7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.3.el7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "product": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.25-1jpp.3.el7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.3.el7?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "product": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.25-1jpp.3.el7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "product": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "product_id": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.25-1jpp.3.el7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.3.el7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "product": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.25-1jpp.3.el7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.3.el7?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "product": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.25-1jpp.3.el7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "product": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "product_id": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.25-1jpp.3.el7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.3.el7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "product": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.25-1jpp.3.el7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.3.el7?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-2783", "discovery_date": "2018-04-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1569204" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2783" }, { "category": "external", "summary": "RHBZ#1569204", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2783" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T19:01:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1723" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)" }, { "cve": "CVE-2018-2790", "cwe": { "id": "CWE-347", "name": "Improper Verification of Cryptographic Signature" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1568515" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2790" }, { "category": "external", "summary": "RHBZ#1568515", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2790", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2790" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T19:01:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1723" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)" }, { "cve": "CVE-2018-2794", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567126" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2794" }, { "category": "external", "summary": "RHBZ#1567126", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2794", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2794" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T19:01:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1723" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)" }, { "cve": "CVE-2018-2795", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567351" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2795" }, { "category": "external", "summary": "RHBZ#1567351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2795", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2795" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T19:01:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1723" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)" }, { "cve": "CVE-2018-2796", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567546" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2796" }, { "category": "external", "summary": "RHBZ#1567546", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2796", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2796" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T19:01:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1723" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)" }, { "cve": "CVE-2018-2797", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567545" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2797" }, { "category": "external", "summary": "RHBZ#1567545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2797", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2797" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T19:01:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1723" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)" }, { "cve": "CVE-2018-2798", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567543" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2798" }, { "category": "external", "summary": "RHBZ#1567543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2798", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2798" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T19:01:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1723" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)" }, { "cve": "CVE-2018-2799", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567542" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2799" }, { "category": "external", "summary": "RHBZ#1567542", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2799", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2799" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T19:01:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1723" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)" }, { "cve": "CVE-2018-2800", "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1568163" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2800" }, { "category": "external", "summary": "RHBZ#1568163", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2800", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2800" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T19:01:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1723" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)" } ] }
rhsa-2018_1724
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 7 to version 7R1 SR4-FP25.\n\nSecurity Fix(es):\n\n* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)\n\n* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)\n\n* OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) (CVE-2018-2796)\n\n* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)\n\n* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)\n\n* OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) (CVE-2018-2799)\n\n* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)\n\n* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2018:1724", "url": "https://access.redhat.com/errata/RHSA-2018:1724" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1567126", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126" }, { "category": "external", "summary": "1567351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351" }, { "category": "external", "summary": "1567542", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542" }, { "category": "external", "summary": "1567543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543" }, { "category": "external", "summary": "1567545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545" }, { "category": "external", "summary": "1567546", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546" }, { "category": "external", "summary": "1568163", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163" }, { "category": "external", "summary": "1568515", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515" }, { "category": "external", "summary": "1569204", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1724.json" } ], "title": "Red Hat Security Advisory: java-1.7.1-ibm security update", "tracking": { "current_release_date": "2024-11-05T20:36:30+00:00", "generator": { "date": "2024-11-05T20:36:30+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2018:1724", "initial_release_date": "2018-05-24T19:05:12+00:00", "revision_history": [ { "date": "2018-05-24T19:05:12+00:00", "number": "1", "summary": "Initial version" }, { "date": "2018-05-24T19:05:12+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T20:36:30+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.2.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "product": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "product_id": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.25-1jpp.2.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.2.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "product": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.25-1jpp.2.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "product": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.25-1jpp.2.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "product": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "product_id": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-plugin@1.7.1.4.25-1jpp.2.el6_9?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.2.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "product": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "product_id": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.25-1jpp.2.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.2.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "product": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.25-1jpp.2.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "product": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.25-1jpp.2.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "product": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "product_id": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-plugin@1.7.1.4.25-1jpp.2.el6_9?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.2.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "product": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "product_id": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.25-1jpp.2.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.2.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "product": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.25-1jpp.2.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "product": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.25-1jpp.2.el6_9?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.2.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "product": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "product_id": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.25-1jpp.2.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.2.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "product": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.25-1jpp.2.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "product": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.25-1jpp.2.el6_9?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-2783", "discovery_date": "2018-04-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1569204" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2783" }, { "category": "external", "summary": "RHBZ#1569204", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2783" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T19:05:12+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1724" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)" }, { "cve": "CVE-2018-2790", "cwe": { "id": "CWE-347", "name": "Improper Verification of Cryptographic Signature" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1568515" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2790" }, { "category": "external", "summary": "RHBZ#1568515", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2790", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2790" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T19:05:12+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1724" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)" }, { "cve": "CVE-2018-2794", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567126" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2794" }, { "category": "external", "summary": "RHBZ#1567126", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2794", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2794" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T19:05:12+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1724" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)" }, { "cve": "CVE-2018-2795", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567351" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2795" }, { "category": "external", "summary": "RHBZ#1567351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2795", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2795" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T19:05:12+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1724" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)" }, { "cve": "CVE-2018-2796", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567546" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2796" }, { "category": "external", "summary": "RHBZ#1567546", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2796", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2796" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T19:05:12+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1724" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)" }, { "cve": "CVE-2018-2797", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567545" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2797" }, { "category": "external", "summary": "RHBZ#1567545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2797", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2797" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T19:05:12+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1724" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)" }, { "cve": "CVE-2018-2798", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567543" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2798" }, { "category": "external", "summary": "RHBZ#1567543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2798", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2798" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T19:05:12+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1724" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)" }, { "cve": "CVE-2018-2799", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567542" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2799" }, { "category": "external", "summary": "RHBZ#1567542", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2799", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2799" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T19:05:12+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1724" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)" }, { "cve": "CVE-2018-2800", "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1568163" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2800" }, { "category": "external", "summary": "RHBZ#1568163", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2800", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2800" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T19:05:12+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1724" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)" } ] }
rhsa-2018_1974
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for java-1.7.1-ibm is now available for Red Hat Satellite 5.6 and Red Hat Satellite 5.7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 7 to version 7R1 SR4-FP25.\n\nSecurity Fix(es):\n\n* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)\n\n* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)\n\n* OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) (CVE-2018-2796)\n\n* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)\n\n* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)\n\n* OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) (CVE-2018-2799)\n\n* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)\n\n* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2018:1974", "url": "https://access.redhat.com/errata/RHSA-2018:1974" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1567126", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126" }, { "category": "external", "summary": "1567351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351" }, { "category": "external", "summary": "1567542", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542" }, { "category": "external", "summary": "1567543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543" }, { "category": "external", "summary": "1567545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545" }, { "category": "external", "summary": "1567546", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546" }, { "category": "external", "summary": "1568163", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163" }, { "category": "external", "summary": "1568515", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515" }, { "category": "external", "summary": "1569204", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1974.json" } ], "title": "Red Hat Security Advisory: java-1.7.1-ibm security update", "tracking": { "current_release_date": "2024-11-05T20:38:23+00:00", "generator": { "date": "2024-11-05T20:38:23+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2018:1974", "initial_release_date": "2018-06-25T14:57:13+00:00", "revision_history": [ { "date": "2018-06-25T14:57:13+00:00", "number": "1", "summary": "Initial version" }, { "date": "2018-06-25T14:57:13+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T20:38:23+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Satellite 5.6 (RHEL v.6)", "product": { "name": "Red Hat Satellite 5.6 (RHEL v.6)", "product_id": "6Server-Satellite56", "product_identification_helper": { "cpe": "cpe:/a:redhat:network_satellite:5.6::el6" } } }, { "category": "product_name", "name": "Red Hat Satellite 5.7 (RHEL v.6)", "product": { "name": "Red Hat Satellite 5.7 (RHEL v.6)", "product_id": "6Server-Satellite57", "product_identification_helper": { "cpe": "cpe:/a:redhat:network_satellite:5.7::el6" } } } ], "category": "product_family", "name": "Red Hat Satellite" }, { "branches": [ { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.3.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.3.el6?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "product": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.3.el6?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "product": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.3.el6?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x as a component of Red Hat Satellite 5.6 (RHEL v.6)", "product_id": "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "relates_to_product_reference": "6Server-Satellite56" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64 as a component of Red Hat Satellite 5.6 (RHEL v.6)", "product_id": "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Server-Satellite56" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x as a component of Red Hat Satellite 5.6 (RHEL v.6)", "product_id": "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "relates_to_product_reference": "6Server-Satellite56" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64 as a component of Red Hat Satellite 5.6 (RHEL v.6)", "product_id": "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Server-Satellite56" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x as a component of Red Hat Satellite 5.7 (RHEL v.6)", "product_id": "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "relates_to_product_reference": "6Server-Satellite57" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64 as a component of Red Hat Satellite 5.7 (RHEL v.6)", "product_id": "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Server-Satellite57" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x as a component of Red Hat Satellite 5.7 (RHEL v.6)", "product_id": "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "relates_to_product_reference": "6Server-Satellite57" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64 as a component of Red Hat Satellite 5.7 (RHEL v.6)", "product_id": "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" }, "product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "relates_to_product_reference": "6Server-Satellite57" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-2783", "discovery_date": "2018-04-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1569204" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2783" }, { "category": "external", "summary": "RHBZ#1569204", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2783" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-06-25T14:57:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1974" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)" }, { "cve": "CVE-2018-2790", "cwe": { "id": "CWE-347", "name": "Improper Verification of Cryptographic Signature" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1568515" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2790" }, { "category": "external", "summary": "RHBZ#1568515", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2790", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2790" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-06-25T14:57:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1974" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)" }, { "cve": "CVE-2018-2794", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567126" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2794" }, { "category": "external", "summary": "RHBZ#1567126", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2794", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2794" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-06-25T14:57:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1974" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)" }, { "cve": "CVE-2018-2795", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567351" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2795" }, { "category": "external", "summary": "RHBZ#1567351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2795", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2795" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-06-25T14:57:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1974" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)" }, { "cve": "CVE-2018-2796", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567546" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2796" }, { "category": "external", "summary": "RHBZ#1567546", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2796", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2796" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-06-25T14:57:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1974" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)" }, { "cve": "CVE-2018-2797", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567545" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2797" }, { "category": "external", "summary": "RHBZ#1567545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2797", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2797" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-06-25T14:57:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1974" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)" }, { "cve": "CVE-2018-2798", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567543" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2798" }, { "category": "external", "summary": "RHBZ#1567543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2798", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2798" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-06-25T14:57:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1974" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)" }, { "cve": "CVE-2018-2799", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567542" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2799" }, { "category": "external", "summary": "RHBZ#1567542", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2799", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2799" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-06-25T14:57:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1974" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)" }, { "cve": "CVE-2018-2800", "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1568163" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2800" }, { "category": "external", "summary": "RHBZ#1568163", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2800", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2800" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-06-25T14:57:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1974" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x", "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)" } ] }
rhsa-2018_0100
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 7 to version 7 Update 171.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page listed in the References section. (CVE-2018-2579, CVE-2018-2581, CVE-2018-2588, CVE-2018-2599, CVE-2018-2602, CVE-2018-2603, CVE-2018-2618, CVE-2018-2629, CVE-2018-2633, CVE-2018-2634, CVE-2018-2637, CVE-2018-2641, CVE-2018-2657, CVE-2018-2663, CVE-2018-2677, CVE-2018-2678)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2018:0100", "url": "https://access.redhat.com/errata/RHSA-2018:0100" }, { "category": "external", "summary": "1534299", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534299" }, { "category": "external", "summary": "1534525", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534525" }, { "category": "external", "summary": "1534543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534543" }, { "category": "external", "summary": "1534553", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534553" }, { "category": "external", "summary": "1534625", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534625" }, { "category": "external", "summary": "1534762", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534762" }, { "category": "external", "summary": "1534766", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534766" }, { "category": "external", "summary": "1534943", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534943" }, { "category": "external", "summary": "1534970", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534970" }, { "category": "external", "summary": "1535036", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535036" }, { "category": "external", "summary": "1535353", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535353" }, { "category": "external", "summary": "1535354", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535354" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_171", "url": "http://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_171" }, { "category": "external", "summary": "1534263", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534263" }, { "category": "external", "summary": "1534288", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534288" }, { "category": "external", "summary": "1534298", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534298" }, { "category": "external", "summary": "1534296", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534296" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0100.json" } ], "title": "Red Hat Security Advisory: java-1.7.0-oracle security update", "tracking": { "current_release_date": "2024-11-05T20:21:20+00:00", "generator": { "date": "2024-11-05T20:21:20+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2018:0100", "initial_release_date": "2018-01-18T21:55:56+00:00", "revision_history": [ { "date": "2018-01-18T21:55:56+00:00", "number": "1", "summary": "Initial version" }, { "date": "2018-01-18T21:55:56+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T20:21:20+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } } ], "category": "product_family", "name": "Oracle Java for Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.171-1jpp.1.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "product": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "product_id": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.171-1jpp.1.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.171-1jpp.1.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.171-1jpp.1.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.171-1jpp.1.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "product_id": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.171-1jpp.1.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.171-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.171-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "product_id": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.171-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "product_id": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.171-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.171-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.171-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.171-1jpp.1.el7?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "product": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "product_id": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.171-1jpp.1.el7?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.171-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "product": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "product_id": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.171-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.171-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "product_id": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.171-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.171-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.171-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-2579", "cwe": { "id": "CWE-567", "name": "Unsynchronized Access to Shared Data in a Multithreaded Context" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534298" } ], "notes": [ { "category": "description", "text": "It was discovered that multiple encryption key classes in the Libraries component of OpenJDK did not properly synchronize access to their internal data. This could possibly cause a multi-threaded Java application to apply weak encryption to data because of the use of a key that was zeroed out.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2579" }, { "category": "external", "summary": "RHBZ#1534298", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534298" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2579", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2579" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2579", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2579" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:56+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0100" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)" }, { "cve": "CVE-2018-2581", "discovery_date": "2018-01-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1535354" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u161, 8u152 and 9.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 7u171, 8u161, and 9.0.4 (JavaFX)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2581" }, { "category": "external", "summary": "RHBZ#1535354", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535354" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2581", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2581" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2581", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2581" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:56+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0100" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 7u171, 8u161, and 9.0.4 (JavaFX)" }, { "cve": "CVE-2018-2588", "cwe": { "id": "CWE-90", "name": "Improper Neutralization of Special Elements used in an LDAP Query (\u0027LDAP Injection\u0027)" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534299" } ], "notes": [ { "category": "description", "text": "It was discovered that the LDAP component of OpenJDK failed to properly encode special characters in user names when adding them to an LDAP search query. A remote attacker could possibly use this flaw to manipulate LDAP queries performed by the LdapLoginModule class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2588" }, { "category": "external", "summary": "RHBZ#1534299", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534299" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2588", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2588" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2588", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2588" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:56+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0100" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)" }, { "cve": "CVE-2018-2599", "cwe": { "id": "CWE-330", "name": "Use of Insufficiently Random Values" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534543" } ], "notes": [ { "category": "description", "text": "It was discovered that the DNS client implementation in the JNDI component of OpenJDK did not use random source ports when sending out DNS queries. This could make it easier for a remote attacker to spoof responses to those queries.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2599" }, { "category": "external", "summary": "RHBZ#1534543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534543" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2599", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2599" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2599", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2599" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:56+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0100" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)" }, { "cve": "CVE-2018-2602", "cwe": { "id": "CWE-426", "name": "Untrusted Search Path" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534525" } ], "notes": [ { "category": "description", "text": "It was discovered that the I18n component of OpenJDK could use an untrusted search path when loading resource bundle classes. A local attacker could possibly use this flaw to execute arbitrary code as another local user by making their Java application load an attacker controlled class file.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: loading of classes from untrusted locations (I18n, 8182601)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2602" }, { "category": "external", "summary": "RHBZ#1534525", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534525" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2602", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2602" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2602", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2602" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:56+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0100" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 4.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: loading of classes from untrusted locations (I18n, 8182601)" }, { "cve": "CVE-2018-2603", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534553" } ], "notes": [ { "category": "description", "text": "It was discovered that the Libraries component of OpenJDK failed to sufficiently limit the amount of memory allocated when reading DER encoded input. A remote attacker could possibly use this flaw to make a Java application use an excessive amount of memory if it parsed attacker supplied DER encoded input.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2603" }, { "category": "external", "summary": "RHBZ#1534553", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534553" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2603", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2603" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2603", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2603" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:56+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0100" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)" }, { "cve": "CVE-2018-2618", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534762" } ], "notes": [ { "category": "description", "text": "It was discovered that the key agreement implementations in the JCE component of OpenJDK did not guarantee sufficient strength of used keys to adequately protect generated shared secret. This could make it easier to break data encryption by attacking key agreement rather than the encryption using the negotiated secret.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient strength of key agreement (JCE, 8185292)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2618" }, { "category": "external", "summary": "RHBZ#1534762", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534762" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2618", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2618" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2618", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2618" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:56+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0100" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: insufficient strength of key agreement (JCE, 8185292)" }, { "cve": "CVE-2018-2629", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534625" } ], "notes": [ { "category": "description", "text": "It was discovered that the JGSS component of OpenJDK failed to properly handle GSS context in the native GSS library wrapper in certain cases. A remote attacker could possibly make a Java application using JGSS to use a previously freed context.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: GSS context use-after-free (JGSS, 8186212)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2629" }, { "category": "external", "summary": "RHBZ#1534625", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534625" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2629", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2629" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2629", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2629" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:56+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0100" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: GSS context use-after-free (JGSS, 8186212)" }, { "cve": "CVE-2018-2633", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1535036" } ], "notes": [ { "category": "description", "text": "It was discovered that the LDAPCertStore class in the JNDI component of OpenJDK failed to securely handle LDAP referrals. An attacker could possibly use this flaw to make it fetch attacker controlled certificate data.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2633" }, { "category": "external", "summary": "RHBZ#1535036", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535036" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2633", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2633" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2633", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2633" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:56+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0100" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)" }, { "cve": "CVE-2018-2634", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534943" } ], "notes": [ { "category": "description", "text": "The JGSS component of OpenJDK ignores the value of the javax.security.auth.useSubjectCredsOnly property when using HTTP/SPNEGO authentication and always uses global credentials. It was discovered that this could cause global credentials to be unexpectedly used by an untrusted Java application.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2634" }, { "category": "external", "summary": "RHBZ#1534943", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534943" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2634", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2634" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2634", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2634" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:56+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0100" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)" }, { "cve": "CVE-2018-2637", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534970" } ], "notes": [ { "category": "description", "text": "It was discovered that the JMX component of OpenJDK failed to properly set the deserialization filter for the SingleEntryRegistry in certain cases. A remote attacker could possibly use this flaw to bypass intended deserialization restrictions.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2637" }, { "category": "external", "summary": "RHBZ#1534970", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534970" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2637", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2637" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2637", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2637" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:56+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0100" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)" }, { "cve": "CVE-2018-2641", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534766" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: GTK library loading use-after-free (AWT, 8185325)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2641" }, { "category": "external", "summary": "RHBZ#1534766", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534766" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2641", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2641" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2641", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2641" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:56+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0100" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: GTK library loading use-after-free (AWT, 8185325)" }, { "cve": "CVE-2018-2657", "discovery_date": "2018-01-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1535353" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u171 and 7u161; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u181 and 7u171 (Serialization)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2657" }, { "category": "external", "summary": "RHBZ#1535353", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535353" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2657", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2657" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2657", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2657" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:56+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0100" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u181 and 7u171 (Serialization)" }, { "cve": "CVE-2018-2663", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534296" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2663" }, { "category": "external", "summary": "RHBZ#1534296", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534296" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2663", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2663" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2663", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2663" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:56+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0100" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)" }, { "cve": "CVE-2018-2677", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534288" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2677" }, { "category": "external", "summary": "RHBZ#1534288", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534288" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2677", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2677" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2677", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2677" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:56+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0100" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)" }, { "cve": "CVE-2018-2678", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534263" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2678" }, { "category": "external", "summary": "RHBZ#1534263", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534263" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2678", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2678" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2678", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2678" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:56+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0100" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)" }, { "cve": "CVE-2018-2783", "discovery_date": "2018-04-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1569204" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2783" }, { "category": "external", "summary": "RHBZ#1569204", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2783" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:56+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0100" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)" } ] }
rhsa-2018_1722
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 8 to version 8 SR5-FP15.\n\nSecurity Fix(es):\n\n* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)\n\n* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)\n\n* OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) (CVE-2018-2796)\n\n* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)\n\n* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)\n\n* OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) (CVE-2018-2799)\n\n* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)\n\n* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2018:1722", "url": "https://access.redhat.com/errata/RHSA-2018:1722" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1567126", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126" }, { "category": "external", "summary": "1567351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351" }, { "category": "external", "summary": "1567542", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542" }, { "category": "external", "summary": "1567543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543" }, { "category": "external", "summary": "1567545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545" }, { "category": "external", "summary": "1567546", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546" }, { "category": "external", "summary": "1568163", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163" }, { "category": "external", "summary": "1568515", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515" }, { "category": "external", "summary": "1569204", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1722.json" } ], "title": "Red Hat Security Advisory: java-1.8.0-ibm security update", "tracking": { "current_release_date": "2024-11-05T20:36:10+00:00", "generator": { "date": "2024-11-05T20:36:10+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2018:1722", "initial_release_date": "2018-05-24T18:57:48+00:00", "revision_history": [ { "date": "2018-05-24T18:57:48+00:00", "number": "1", "summary": "Initial version" }, { "date": "2018-05-24T18:57:48+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T20:36:10+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "product": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.15-1jpp.2.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "product": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.15-1jpp.2.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "product": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.15-1jpp.2.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "product": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "product_id": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.15-1jpp.2.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.2.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "product": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.2.el6_9?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "product": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.15-1jpp.2.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "product": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.15-1jpp.2.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "product": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.15-1jpp.2.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "product": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "product_id": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.15-1jpp.2.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.2.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "product": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.2.el6_9?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "product": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.15-1jpp.2.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "product": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.15-1jpp.2.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "product": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "product_id": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.15-1jpp.2.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.2.el6_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "product": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.2.el6_9?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "product": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.15-1jpp.2.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "product": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.15-1jpp.2.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "product": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "product_id": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.15-1jpp.2.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.2.el6_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "product": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.2.el6_9?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.9.z" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-2783", "discovery_date": "2018-04-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1569204" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2783" }, { "category": "external", "summary": "RHBZ#1569204", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2783" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T18:57:48+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1722" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)" }, { "cve": "CVE-2018-2790", "cwe": { "id": "CWE-347", "name": "Improper Verification of Cryptographic Signature" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1568515" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2790" }, { "category": "external", "summary": "RHBZ#1568515", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2790", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2790" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T18:57:48+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1722" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)" }, { "cve": "CVE-2018-2794", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567126" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2794" }, { "category": "external", "summary": "RHBZ#1567126", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2794", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2794" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T18:57:48+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1722" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)" }, { "cve": "CVE-2018-2795", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567351" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2795" }, { "category": "external", "summary": "RHBZ#1567351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2795", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2795" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T18:57:48+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1722" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)" }, { "cve": "CVE-2018-2796", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567546" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2796" }, { "category": "external", "summary": "RHBZ#1567546", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2796", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2796" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T18:57:48+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1722" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)" }, { "cve": "CVE-2018-2797", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567545" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2797" }, { "category": "external", "summary": "RHBZ#1567545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2797", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2797" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T18:57:48+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1722" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)" }, { "cve": "CVE-2018-2798", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567543" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2798" }, { "category": "external", "summary": "RHBZ#1567543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2798", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2798" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T18:57:48+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1722" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)" }, { "cve": "CVE-2018-2799", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567542" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2799" }, { "category": "external", "summary": "RHBZ#1567542", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2799", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2799" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T18:57:48+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1722" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)" }, { "cve": "CVE-2018-2800", "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1568163" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2800" }, { "category": "external", "summary": "RHBZ#1568163", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2800", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2800" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T18:57:48+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1722" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x", "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)" } ] }
rhsa-2018_0099
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Oracle Java SE version 8 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 8 to version 8 Update 161.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page listed in the References section. (CVE-2018-2579, CVE-2018-2581, CVE-2018-2582, CVE-2018-2588, CVE-2018-2599, CVE-2018-2602, CVE-2018-2603, CVE-2018-2618, CVE-2018-2627, CVE-2018-2629, CVE-2018-2633, CVE-2018-2634, CVE-2018-2637, CVE-2018-2638, CVE-2018-2639, CVE-2018-2641, CVE-2018-2663, CVE-2018-2677, CVE-2018-2678)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2018:0099", "url": "https://access.redhat.com/errata/RHSA-2018:0099" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#critical", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/java/javase/8u161-relnotes-4021379.html", "url": "http://www.oracle.com/technetwork/java/javase/8u161-relnotes-4021379.html" }, { "category": "external", "summary": "1534263", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534263" }, { "category": "external", "summary": "1534288", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534288" }, { "category": "external", "summary": "1534296", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534296" }, { "category": "external", "summary": "1534298", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534298" }, { "category": "external", "summary": "1534299", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534299" }, { "category": "external", "summary": "1534525", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534525" }, { "category": "external", "summary": "1534543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534543" }, { "category": "external", "summary": "1534553", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534553" }, { "category": "external", "summary": "1534625", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534625" }, { "category": "external", "summary": "1534762", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534762" }, { "category": "external", "summary": "1534766", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534766" }, { "category": "external", "summary": "1534768", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534768" }, { "category": "external", "summary": "1534943", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534943" }, { "category": "external", "summary": "1534970", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534970" }, { "category": "external", "summary": "1535036", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535036" }, { "category": "external", "summary": "1535350", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535350" }, { "category": "external", "summary": "1535351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535351" }, { "category": "external", "summary": "1535352", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535352" }, { "category": "external", "summary": "1535354", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535354" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0099.json" } ], "title": "Red Hat Security Advisory: java-1.8.0-oracle security update", "tracking": { "current_release_date": "2024-11-05T20:21:14+00:00", "generator": { "date": "2024-11-05T20:21:14+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2018:0099", "initial_release_date": "2018-01-18T21:55:29+00:00", "revision_history": [ { "date": "2018-01-18T21:55:29+00:00", "number": "1", "summary": "Initial version" }, { "date": "2018-01-18T21:55:29+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T20:21:14+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } } ], "category": "product_family", "name": "Oracle Java for Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "product": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "product_id": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-jdbc@1.8.0.161-1jpp.2.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "product": { "name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "product_id": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-devel@1.8.0.161-1jpp.2.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "product": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "product_id": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-javafx@1.8.0.161-1jpp.2.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "product": { "name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "product_id": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-src@1.8.0.161-1jpp.2.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "product": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "product_id": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-plugin@1.8.0.161-1jpp.2.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "product": { "name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "product_id": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle@1.8.0.161-1jpp.2.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "product_id": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-jdbc@1.8.0.161-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "product_id": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-javafx@1.8.0.161-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "product_id": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-devel@1.8.0.161-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "product_id": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-plugin@1.8.0.161-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "product_id": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-src@1.8.0.161-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "product": { "name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "product_id": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle@1.8.0.161-1jpp.1.el6_9?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "product": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "product_id": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-jdbc@1.8.0.161-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "product": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "product_id": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-javafx@1.8.0.161-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "product": { "name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "product_id": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-devel@1.8.0.161-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "product": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "product_id": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-plugin@1.8.0.161-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "product": { "name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "product_id": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-src@1.8.0.161-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "product": { "name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "product_id": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle@1.8.0.161-1jpp.1.el6_9?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.4.Z" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-2579", "cwe": { "id": "CWE-567", "name": "Unsynchronized Access to Shared Data in a Multithreaded Context" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534298" } ], "notes": [ { "category": "description", "text": "It was discovered that multiple encryption key classes in the Libraries component of OpenJDK did not properly synchronize access to their internal data. This could possibly cause a multi-threaded Java application to apply weak encryption to data because of the use of a key that was zeroed out.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2579" }, { "category": "external", "summary": "RHBZ#1534298", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534298" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2579", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2579" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2579", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2579" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)" }, { "cve": "CVE-2018-2581", "discovery_date": "2018-01-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1535354" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u161, 8u152 and 9.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 7u171, 8u161, and 9.0.4 (JavaFX)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2581" }, { "category": "external", "summary": "RHBZ#1535354", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535354" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2581", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2581" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2581", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2581" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 7u171, 8u161, and 9.0.4 (JavaFX)" }, { "cve": "CVE-2018-2582", "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534768" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2582" }, { "category": "external", "summary": "RHBZ#1534768", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534768" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2582", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2582" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2582", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2582" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962)" }, { "cve": "CVE-2018-2588", "cwe": { "id": "CWE-90", "name": "Improper Neutralization of Special Elements used in an LDAP Query (\u0027LDAP Injection\u0027)" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534299" } ], "notes": [ { "category": "description", "text": "It was discovered that the LDAP component of OpenJDK failed to properly encode special characters in user names when adding them to an LDAP search query. A remote attacker could possibly use this flaw to manipulate LDAP queries performed by the LdapLoginModule class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2588" }, { "category": "external", "summary": "RHBZ#1534299", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534299" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2588", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2588" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2588", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2588" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)" }, { "cve": "CVE-2018-2599", "cwe": { "id": "CWE-330", "name": "Use of Insufficiently Random Values" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534543" } ], "notes": [ { "category": "description", "text": "It was discovered that the DNS client implementation in the JNDI component of OpenJDK did not use random source ports when sending out DNS queries. This could make it easier for a remote attacker to spoof responses to those queries.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2599" }, { "category": "external", "summary": "RHBZ#1534543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534543" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2599", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2599" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2599", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2599" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)" }, { "cve": "CVE-2018-2602", "cwe": { "id": "CWE-426", "name": "Untrusted Search Path" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534525" } ], "notes": [ { "category": "description", "text": "It was discovered that the I18n component of OpenJDK could use an untrusted search path when loading resource bundle classes. A local attacker could possibly use this flaw to execute arbitrary code as another local user by making their Java application load an attacker controlled class file.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: loading of classes from untrusted locations (I18n, 8182601)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2602" }, { "category": "external", "summary": "RHBZ#1534525", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534525" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2602", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2602" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2602", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2602" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 4.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: loading of classes from untrusted locations (I18n, 8182601)" }, { "cve": "CVE-2018-2603", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534553" } ], "notes": [ { "category": "description", "text": "It was discovered that the Libraries component of OpenJDK failed to sufficiently limit the amount of memory allocated when reading DER encoded input. A remote attacker could possibly use this flaw to make a Java application use an excessive amount of memory if it parsed attacker supplied DER encoded input.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2603" }, { "category": "external", "summary": "RHBZ#1534553", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534553" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2603", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2603" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2603", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2603" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)" }, { "cve": "CVE-2018-2618", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534762" } ], "notes": [ { "category": "description", "text": "It was discovered that the key agreement implementations in the JCE component of OpenJDK did not guarantee sufficient strength of used keys to adequately protect generated shared secret. This could make it easier to break data encryption by attacking key agreement rather than the encryption using the negotiated secret.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient strength of key agreement (JCE, 8185292)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2618" }, { "category": "external", "summary": "RHBZ#1534762", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534762" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2618", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2618" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2618", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2618" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: insufficient strength of key agreement (JCE, 8185292)" }, { "cve": "CVE-2018-2627", "discovery_date": "2018-01-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1535352" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to the Windows installer only. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Installer)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2627" }, { "category": "external", "summary": "RHBZ#1535352", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535352" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2627", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2627" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2627", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2627" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Installer)" }, { "cve": "CVE-2018-2629", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534625" } ], "notes": [ { "category": "description", "text": "It was discovered that the JGSS component of OpenJDK failed to properly handle GSS context in the native GSS library wrapper in certain cases. A remote attacker could possibly make a Java application using JGSS to use a previously freed context.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: GSS context use-after-free (JGSS, 8186212)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2629" }, { "category": "external", "summary": "RHBZ#1534625", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534625" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2629", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2629" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2629", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2629" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: GSS context use-after-free (JGSS, 8186212)" }, { "cve": "CVE-2018-2633", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1535036" } ], "notes": [ { "category": "description", "text": "It was discovered that the LDAPCertStore class in the JNDI component of OpenJDK failed to securely handle LDAP referrals. An attacker could possibly use this flaw to make it fetch attacker controlled certificate data.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2633" }, { "category": "external", "summary": "RHBZ#1535036", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535036" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2633", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2633" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2633", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2633" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)" }, { "cve": "CVE-2018-2634", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534943" } ], "notes": [ { "category": "description", "text": "The JGSS component of OpenJDK ignores the value of the javax.security.auth.useSubjectCredsOnly property when using HTTP/SPNEGO authentication and always uses global credentials. It was discovered that this could cause global credentials to be unexpectedly used by an untrusted Java application.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2634" }, { "category": "external", "summary": "RHBZ#1534943", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534943" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2634", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2634" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2634", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2634" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)" }, { "cve": "CVE-2018-2637", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534970" } ], "notes": [ { "category": "description", "text": "It was discovered that the JMX component of OpenJDK failed to properly set the deserialization filter for the SingleEntryRegistry in certain cases. A remote attacker could possibly use this flaw to bypass intended deserialization restrictions.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2637" }, { "category": "external", "summary": "RHBZ#1534970", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534970" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2637", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2637" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2637", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2637" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)" }, { "cve": "CVE-2018-2638", "discovery_date": "2018-01-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1535350" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2638" }, { "category": "external", "summary": "RHBZ#1535350", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535350" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2638", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2638" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2638", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2638" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)" }, { "cve": "CVE-2018-2639", "discovery_date": "2018-01-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1535351" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2639" }, { "category": "external", "summary": "RHBZ#1535351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535351" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2639", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2639" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2639", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2639" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)" }, { "cve": "CVE-2018-2641", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534766" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: GTK library loading use-after-free (AWT, 8185325)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2641" }, { "category": "external", "summary": "RHBZ#1534766", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534766" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2641", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2641" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2641", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2641" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: GTK library loading use-after-free (AWT, 8185325)" }, { "cve": "CVE-2018-2663", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534296" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2663" }, { "category": "external", "summary": "RHBZ#1534296", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534296" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2663", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2663" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2663", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2663" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)" }, { "cve": "CVE-2018-2677", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534288" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2677" }, { "category": "external", "summary": "RHBZ#1534288", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534288" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2677", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2677" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2677", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2677" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)" }, { "cve": "CVE-2018-2678", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1534263" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2678" }, { "category": "external", "summary": "RHBZ#1534263", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534263" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2678", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2678" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2678", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2678" } ], "release_date": "2018-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)" }, { "cve": "CVE-2018-2783", "discovery_date": "2018-04-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1569204" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2783" }, { "category": "external", "summary": "RHBZ#1569204", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2783" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-01-18T21:55:29+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0099" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)" } ] }
rhsa-2018_1721
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 8 to version 8 SR5-FP15.\n\nSecurity Fix(es):\n\n* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)\n\n* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)\n\n* OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) (CVE-2018-2796)\n\n* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)\n\n* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)\n\n* OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) (CVE-2018-2799)\n\n* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)\n\n* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2018:1721", "url": "https://access.redhat.com/errata/RHSA-2018:1721" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1567126", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126" }, { "category": "external", "summary": "1567351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351" }, { "category": "external", "summary": "1567542", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542" }, { "category": "external", "summary": "1567543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543" }, { "category": "external", "summary": "1567545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545" }, { "category": "external", "summary": "1567546", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546" }, { "category": "external", "summary": "1568163", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163" }, { "category": "external", "summary": "1568515", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515" }, { "category": "external", "summary": "1569204", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1721.json" } ], "title": "Red Hat Security Advisory: java-1.8.0-ibm security update", "tracking": { "current_release_date": "2024-11-05T20:36:04+00:00", "generator": { "date": "2024-11-05T20:36:04+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2018:1721", "initial_release_date": "2018-05-24T18:53:13+00:00", "revision_history": [ { "date": "2018-05-24T18:53:13+00:00", "number": "1", "summary": "Initial version" }, { "date": "2018-05-24T18:53:13+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T20:36:04+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Client Supplementary (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:7" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "product": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "product_id": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.15-1jpp.5.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.5.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "product": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.5.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "product": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.15-1jpp.5.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "product": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.15-1jpp.5.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "product": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.15-1jpp.5.el7?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "product": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.15-1jpp.5.el7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "product": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "product_id": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.15-1jpp.5.el7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "product": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.5.el7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.5.el7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "product": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.15-1jpp.5.el7?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "product": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.15-1jpp.5.el7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "product": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "product_id": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.15-1jpp.5.el7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "product": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.5.el7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.5.el7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "product": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.15-1jpp.5.el7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "product": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.15-1jpp.5.el7?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "product": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.15-1jpp.5.el7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "product": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "product_id": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.15-1jpp.5.el7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "product": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.5.el7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.5.el7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "product": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.15-1jpp.5.el7?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)", "product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Client-7.5.Z-Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)", "product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)", "product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Server-7.5.Z-Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)", "product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" }, "product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "relates_to_product_reference": "7Workstation-7.5.Z-Workstation" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-2783", "discovery_date": "2018-04-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1569204" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2783" }, { "category": "external", "summary": "RHBZ#1569204", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2783" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T18:53:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1721" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)" }, { "cve": "CVE-2018-2790", "cwe": { "id": "CWE-347", "name": "Improper Verification of Cryptographic Signature" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1568515" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2790" }, { "category": "external", "summary": "RHBZ#1568515", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2790", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2790" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T18:53:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1721" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)" }, { "cve": "CVE-2018-2794", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567126" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2794" }, { "category": "external", "summary": "RHBZ#1567126", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2794", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2794" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T18:53:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1721" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)" }, { "cve": "CVE-2018-2795", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567351" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2795" }, { "category": "external", "summary": "RHBZ#1567351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2795", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2795" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T18:53:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1721" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)" }, { "cve": "CVE-2018-2796", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567546" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2796" }, { "category": "external", "summary": "RHBZ#1567546", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2796", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2796" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T18:53:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1721" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)" }, { "cve": "CVE-2018-2797", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567545" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2797" }, { "category": "external", "summary": "RHBZ#1567545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2797", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2797" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T18:53:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1721" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)" }, { "cve": "CVE-2018-2798", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567543" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2798" }, { "category": "external", "summary": "RHBZ#1567543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2798", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2798" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T18:53:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1721" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)" }, { "cve": "CVE-2018-2799", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567542" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2799" }, { "category": "external", "summary": "RHBZ#1567542", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2799", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2799" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T18:53:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1721" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)" }, { "cve": "CVE-2018-2800", "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1568163" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2800" }, { "category": "external", "summary": "RHBZ#1568163", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2800", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2800" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-05-24T18:53:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1721" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x", "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)" } ] }
rhsa-2018_1975
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for java-1.8.0-ibm is now available for Red Hat Satellite 5.8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 8 to version 8 SR5-FP15.\n\nSecurity Fix(es):\n\n* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)\n\n* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)\n\n* OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) (CVE-2018-2796)\n\n* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)\n\n* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)\n\n* OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) (CVE-2018-2799)\n\n* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)\n\n* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2018:1975", "url": "https://access.redhat.com/errata/RHSA-2018:1975" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1567126", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126" }, { "category": "external", "summary": "1567351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351" }, { "category": "external", "summary": "1567542", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542" }, { "category": "external", "summary": "1567543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543" }, { "category": "external", "summary": "1567545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545" }, { "category": "external", "summary": "1567546", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546" }, { "category": "external", "summary": "1568163", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163" }, { "category": "external", "summary": "1568515", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515" }, { "category": "external", "summary": "1569204", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1975.json" } ], "title": "Red Hat Security Advisory: java-1.8.0-ibm security update", "tracking": { "current_release_date": "2024-11-05T20:38:17+00:00", "generator": { "date": "2024-11-05T20:38:17+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2018:1975", "initial_release_date": "2018-06-25T14:57:17+00:00", "revision_history": [ { "date": "2018-06-25T14:57:17+00:00", "number": "1", "summary": "Initial version" }, { "date": "2018-06-25T14:57:17+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T20:38:17+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Satellite 5.8 (RHEL v.6)", "product": { "name": "Red Hat Satellite 5.8 (RHEL v.6)", "product_id": "6Server-Satellite58", "product_identification_helper": { "cpe": "cpe:/a:redhat:network_satellite:5.8::el6" } } } ], "category": "product_family", "name": "Red Hat Satellite" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.2.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "product": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.2.el6?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "product": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.2.el6?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "product": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.2.el6?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x as a component of Red Hat Satellite 5.8 (RHEL v.6)", "product_id": "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "relates_to_product_reference": "6Server-Satellite58" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64 as a component of Red Hat Satellite 5.8 (RHEL v.6)", "product_id": "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64" }, "product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Server-Satellite58" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x as a component of Red Hat Satellite 5.8 (RHEL v.6)", "product_id": "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "relates_to_product_reference": "6Server-Satellite58" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64 as a component of Red Hat Satellite 5.8 (RHEL v.6)", "product_id": "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" }, "product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64", "relates_to_product_reference": "6Server-Satellite58" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-2783", "discovery_date": "2018-04-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1569204" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2783" }, { "category": "external", "summary": "RHBZ#1569204", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2783" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-06-25T14:57:17+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1975" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)" }, { "cve": "CVE-2018-2790", "cwe": { "id": "CWE-347", "name": "Improper Verification of Cryptographic Signature" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1568515" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2790" }, { "category": "external", "summary": "RHBZ#1568515", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2790", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2790" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-06-25T14:57:17+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1975" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)" }, { "cve": "CVE-2018-2794", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567126" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2794" }, { "category": "external", "summary": "RHBZ#1567126", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2794", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2794" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-06-25T14:57:17+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1975" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)" }, { "cve": "CVE-2018-2795", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567351" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2795" }, { "category": "external", "summary": "RHBZ#1567351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2795", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2795" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-06-25T14:57:17+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1975" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)" }, { "cve": "CVE-2018-2796", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567546" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2796" }, { "category": "external", "summary": "RHBZ#1567546", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2796", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2796" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-06-25T14:57:17+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1975" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)" }, { "cve": "CVE-2018-2797", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567545" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2797" }, { "category": "external", "summary": "RHBZ#1567545", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2797", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2797" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-06-25T14:57:17+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1975" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)" }, { "cve": "CVE-2018-2798", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567543" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2798" }, { "category": "external", "summary": "RHBZ#1567543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2798", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2798" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-06-25T14:57:17+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1975" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)" }, { "cve": "CVE-2018-2799", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1567542" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2799" }, { "category": "external", "summary": "RHBZ#1567542", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2799", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2799" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-06-25T14:57:17+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1975" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)" }, { "cve": "CVE-2018-2800", "discovery_date": "2018-03-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1568163" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-2800" }, { "category": "external", "summary": "RHBZ#1568163", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-2800", "url": "https://www.cve.org/CVERecord?id=CVE-2018-2800" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800" } ], "release_date": "2018-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-06-25T14:57:17+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.", "product_ids": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:1975" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x", "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)" } ] }
ghsa-36xm-wx7c-g2hq
Vulnerability from github
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
{ "affected": [], "aliases": [ "CVE-2018-2783" ], "database_specific": { "cwe_ids": [], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2018-04-19T02:29:00Z", "severity": "HIGH" }, "details": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "id": "GHSA-36xm-wx7c-g2hq", "modified": "2022-05-13T01:16:55Z", "published": "2022-05-13T01:16:55Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2018:1203" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2018:1205" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2018:1721" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2018:1722" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2018:1723" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2018:1724" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2018:1974" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2018:1975" }, { "type": "WEB", "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0" }, { "type": "WEB", "url": "https://security.netapp.com/advisory/ntap-20180419-0001" }, { "type": "WEB", "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us" }, { "type": "WEB", "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us" }, { "type": "WEB", "url": "https://usn.ubuntu.com/3644-1" }, { "type": "WEB", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/103832" }, { "type": "WEB", "url": "http://www.securitytracker.com/id/1040697" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "type": "CVSS_V3" } ] }
gsd-2018-2783
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2018-2783", "description": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "id": "GSD-2018-2783", "references": [ "https://www.suse.com/security/cve/CVE-2018-2783.html", "https://access.redhat.com/errata/RHSA-2018:1975", "https://access.redhat.com/errata/RHSA-2018:1974", "https://access.redhat.com/errata/RHSA-2018:1724", "https://access.redhat.com/errata/RHSA-2018:1723", "https://access.redhat.com/errata/RHSA-2018:1722", "https://access.redhat.com/errata/RHSA-2018:1721", "https://access.redhat.com/errata/RHSA-2018:1205", "https://access.redhat.com/errata/RHSA-2018:1203", "https://access.redhat.com/errata/RHSA-2018:0100", "https://access.redhat.com/errata/RHSA-2018:0099", "https://ubuntu.com/security/CVE-2018-2783" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2018-2783" ], "details": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "id": "GSD-2018-2783", "modified": "2023-12-13T01:22:32.157649Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "secalert_us@oracle.com", "ID": "CVE-2018-2783", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "RHSA-2018:1975", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:1975" }, { "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us", "refsource": "CONFIRM", "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us" }, { "name": "1040697", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1040697" }, { "name": "RHSA-2018:1724", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:1724" }, { "name": "RHSA-2018:1203", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:1203" }, { "name": "USN-3644-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/3644-1/" }, { "name": "RHSA-2018:1723", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:1723" }, { "name": "https://security.netapp.com/advisory/ntap-20180419-0001/", "refsource": "CONFIRM", "url": "https://security.netapp.com/advisory/ntap-20180419-0001/" }, { "name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0", "refsource": "CONFIRM", "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0" }, { "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html" }, { "name": "RHSA-2018:1722", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:1722" }, { "name": "RHSA-2018:1974", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:1974" }, { "name": "RHSA-2018:1205", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:1205" }, { "name": "RHSA-2018:1721", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:1721" }, { "name": "103832", "refsource": "BID", "url": "http://www.securityfocus.com/bid/103832" }, { "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us", "refsource": "CONFIRM", "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:oracle:jdk:1.8.0:update152:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:jdk:1.7.0:update161:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:jdk:1.6.0:update181:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:jre:1.6.0:update181:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:jre:1.8.0:update152:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:jre:1.7.0:update161:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:oracle:jrockit:r28.3.17:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "secalert_us@oracle.com", "ID": "CVE-2018-2783" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ] } ] }, "references": { "reference_data": [ { "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html", "refsource": "CONFIRM", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html" }, { "name": "1040697", "refsource": "SECTRACK", "tags": [ "Broken Link" ], "url": "http://www.securitytracker.com/id/1040697" }, { "name": "103832", "refsource": "BID", "tags": [ "Broken Link" ], "url": "http://www.securityfocus.com/bid/103832" }, { "name": "https://security.netapp.com/advisory/ntap-20180419-0001/", "refsource": "CONFIRM", "tags": [ "Third Party Advisory" ], "url": "https://security.netapp.com/advisory/ntap-20180419-0001/" }, { "name": "RHSA-2018:1205", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2018:1205" }, { "name": "RHSA-2018:1203", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2018:1203" }, { "name": "USN-3644-1", "refsource": "UBUNTU", "tags": [ "Third Party Advisory" ], "url": "https://usn.ubuntu.com/3644-1/" }, { "name": "RHSA-2018:1724", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2018:1724" }, { "name": "RHSA-2018:1723", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2018:1723" }, { "name": "RHSA-2018:1722", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2018:1722" }, { "name": "RHSA-2018:1721", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2018:1721" }, { "name": "RHSA-2018:1975", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2018:1975" }, { "name": "RHSA-2018:1974", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2018:1974" }, { "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us", "refsource": "CONFIRM", "tags": [ "Third Party Advisory" ], "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us" }, { "name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0", "refsource": "CONFIRM", "tags": [ "Third Party Advisory" ], "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0" }, { "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us", "refsource": "CONFIRM", "tags": [ "Third Party Advisory" ], "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us" } ] } }, "impact": { "baseMetricV2": { "cvssV2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "exploitabilityScore": 8.6, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "exploitabilityScore": 2.2, "impactScore": 5.2 } }, "lastModifiedDate": "2022-10-06T18:56Z", "publishedDate": "2018-04-19T02:29Z" } } }
wid-sec-w-2023-1375
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Die Java Platform, Standard Edition (SE) ist eine Sammlung von Java-APIs (JDK) und der Java Laufzeit Umgebung (JRE).\r\nJava Standard Edition (SE) Embedded ist die Laufzeitumgebung f\u00fcr die Java-Plattform des US-Unternehmens Oracle Corporation f\u00fcr Embedded Systems.\r\nOracle JRockit JVM ist eine leistungsf\u00e4hige Java Virtual Machine, die in Oracle Fusion Middleware enthalten ist.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit ausnutzen, um die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t zu gef\u00e4hrden.", "title": "Angriff" }, { "category": "general", "text": "- UNIX\n- Linux\n- Windows\n- F5 Networks", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-1375 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2018/wid-sec-w-2023-1375.json" }, { "category": "self", "summary": "WID-SEC-2023-1375 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1375" }, { "category": "external", "summary": "IBM Security Bulletin 7001787 vom 2023-06-07", "url": "https://www.ibm.com/support/pages/node/7001787" }, { "category": "external", "summary": "Oracle Critical Patch Update Advisory - April 2018 vom 2018-04-17", "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA" }, { "category": "external", "summary": "NetApp Security Advisory NTAP-20180419-0001 vom 2018-04-20", "url": "https://security.netapp.com/advisory/ntap-20180419-0001/" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2018-1191 vom 2018-04-20", "url": "http://linux.oracle.com/errata/ELSA-2018-1191.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2018-1188 vom 2018-04-20", "url": "http://linux.oracle.com/errata/ELSA-2018-1188.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2018:1201 vom 2018-04-24", "url": "https://access.redhat.com/errata/RHSA-2018:1201" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2018:1204 vom 2018-04-24", "url": "https://access.redhat.com/errata/RHSA-2018:1204" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2018:1206 vom 2018-04-24", "url": "https://access.redhat.com/errata/RHSA-2018:1206" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2018:1202 vom 2018-04-24", "url": "https://access.redhat.com/errata/RHSA-2018:1202" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2018:1205 vom 2018-04-24", "url": "https://access.redhat.com/errata/RHSA-2018:1205" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2018:1203 vom 2018-04-24", "url": "https://access.redhat.com/errata/RHSA-2018:1203" }, { "category": "external", "summary": "Debian Security Advisory DSA-4185 vom 2018-04-29", "url": "https://www.debian.org/security/2018/dsa-4185" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2018-1270 vom 2018-05-01", "url": "http://linux.oracle.com/errata/ELSA-2018-1270.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2018:1270 vom 2018-04-30", "url": "https://access.redhat.com/errata/RHSA-2018:1270" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2018:1188", "url": "https://access.redhat.com/errata/RHSA-2018:1188" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2018-1278 vom 2018-05-03", "url": "http://linux.oracle.com/errata/ELSA-2018-1278.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2018:1278 vom 2018-05-03", "url": "https://access.redhat.com/errata/RHSA-2018:1278" }, { "category": "external", "summary": "CentOS Security Advisory CESA-2018:1270 vom 2018-05-02", "url": "http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2018-1270-Important-CentOS-6-java-1-7-0-openjdk-Security-Update-tp4645024.html" }, { "category": "external", "summary": "McAfee Security Bulletin", "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10234" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2018:1724 vom 2018-05-24", "url": "http://rhn.redhat.com/errata/RHSA-2018-1724.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2018:1723 vom 2018-05-24", "url": "http://rhn.redhat.com/errata/RHSA-2018-1723.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2018:1722 vom 2018-05-24", "url": "http://rhn.redhat.com/errata/RHSA-2018-1722.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2018:1721 vom 2018-05-24", "url": "http://rhn.redhat.com/errata/RHSA-2018-1721.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2018:1447-1 vom 2018-05-29", "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181447-1.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2018:1458-1 vom 2018-05-29", "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181458-1.html" }, { "category": "external", "summary": "Debian Security Advisory DSA-4225 vom 2018-06-11", "url": "https://www.debian.org/security/2018/dsa-4225" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2018:1692-1 vom 2018-06-14", "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181692-1.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2018:1690-1 vom 2018-06-14", "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181690-1.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2018:1738-1 vom 2018-06-20", "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181738-1.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2018:1764-1 vom 2018-06-20", "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181764-1.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2018:1975 vom 2018-06-25", "url": "http://rhn.redhat.com/errata/RHSA-2018-1975.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2018:1974 vom 2018-06-25", "url": "http://rhn.redhat.com/errata/RHSA-2018-1974.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2018:1938-1 vom 2018-07-13", "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181938-1.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2018:1938-2 vom 2018-07-13", "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181938-2.html" }, { "category": "external", "summary": "F5 Security Advisory K15217245 vom 2018-09-19", "url": "https://support.f5.com/csp/article/K15217245" }, { "category": "external", "summary": "F5 Security Advisory K44923228 Stand 2018-09.20", "url": "https://support.f5.com/csp/article/K44923228" }, { "category": "external", "summary": "F5 Security Advisory K33924005 Stand 2018-09.20", "url": "https://support.f5.com/csp/article/K33924005" }, { "category": "external", "summary": "F5 Security Advisory K70321874 vom 2018-12-18", "url": "https://support.f5.com/csp/article/K70321874" }, { "category": "external", "summary": "Dell/EMC Knowledge Base Article: 000529947", "url": "https://support.emc.com/kb/529947" } ], "source_lang": "en-US", "title": "Oracle Java SE: Mehrere Schwachstellen", "tracking": { "current_release_date": "2023-06-06T22:00:00.000+00:00", "generator": { "date": "2024-02-15T17:30:00.301+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2023-1375", "initial_release_date": "2018-04-17T22:00:00.000+00:00", "revision_history": [ { "date": "2018-04-17T22:00:00.000+00:00", "number": "1", "summary": "Initial Release" }, { "date": "2018-04-17T22:00:00.000+00:00", "number": "2", "summary": "Version nicht vorhanden" }, { "date": "2018-04-19T22:00:00.000+00:00", "number": "3", "summary": "New remediations available" }, { "date": "2018-04-19T22:00:00.000+00:00", "number": "4", "summary": "Version nicht vorhanden" }, { "date": "2018-04-23T22:00:00.000+00:00", "number": "5", "summary": "New remediations available" }, { "date": "2018-04-29T22:00:00.000+00:00", "number": "6", "summary": "New remediations available" }, { "date": "2018-05-01T22:00:00.000+00:00", "number": "7", "summary": "New remediations available" }, { "date": "2018-05-01T22:00:00.000+00:00", "number": "8", "summary": "New remediations available" }, { "date": "2018-05-02T22:00:00.000+00:00", "number": "9", "summary": "New remediations available" }, { "date": "2018-05-02T22:00:00.000+00:00", "number": "10", "summary": "New remediations available" }, { "date": "2018-05-07T22:00:00.000+00:00", "number": "11", "summary": "New remediations available" }, { "date": "2018-05-07T22:00:00.000+00:00", "number": "12", "summary": "Version nicht vorhanden" }, { "date": "2018-05-24T22:00:00.000+00:00", "number": "13", "summary": "New remediations available" }, { "date": "2018-05-28T22:00:00.000+00:00", "number": "14", "summary": "New remediations available" }, { "date": "2018-05-29T22:00:00.000+00:00", "number": "15", "summary": "New remediations available" }, { "date": "2018-06-11T22:00:00.000+00:00", "number": "16", "summary": "New remediations available" }, { "date": "2018-06-14T22:00:00.000+00:00", "number": "17", "summary": "New remediations available" }, { "date": "2018-06-19T22:00:00.000+00:00", "number": "18", "summary": "New remediations available" }, { "date": "2018-06-20T22:00:00.000+00:00", "number": "19", "summary": "New remediations available" }, { "date": "2018-06-25T22:00:00.000+00:00", "number": "20", "summary": "New remediations available" }, { "date": "2018-07-12T22:00:00.000+00:00", "number": "21", "summary": "New remediations available" }, { "date": "2018-09-19T22:00:00.000+00:00", "number": "22", "summary": "New remediations available" }, { "date": "2018-09-19T22:00:00.000+00:00", "number": "23", "summary": "Version nicht vorhanden" }, { "date": "2018-09-19T22:00:00.000+00:00", "number": "24", "summary": "Version nicht vorhanden" }, { "date": "2018-12-18T23:00:00.000+00:00", "number": "25", "summary": "New remediations available" }, { "date": "2019-01-30T23:00:00.000+00:00", "number": "26", "summary": "Neue Updates von EMC aufgenommen" }, { "date": "2023-06-06T22:00:00.000+00:00", "number": "27", "summary": "Neue Updates von IBM aufgenommen" } ], "status": "final", "version": "27" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian Linux", "product": { "name": "Debian Linux", "product_id": "2951", "product_identification_helper": { "cpe": "cpe:/o:debian:debian_linux:-" } } } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "category": "product_name", "name": "EMC VNX2", "product": { "name": "EMC VNX2", "product_id": "T004667", "product_identification_helper": { "cpe": "cpe:/h:emc:vnx:-" } } } ], "category": "vendor", "name": "EMC" }, { "branches": [ { "category": "product_name", "name": "F5 BIG-IP", "product": { "name": "F5 BIG-IP", "product_id": "T001663", "product_identification_helper": { "cpe": "cpe:/a:f5:big-ip:-" } } } ], "category": "vendor", "name": "F5" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "IBM Operational Decision Manager 8.10.x", "product": { "name": "IBM Operational Decision Manager 8.10.x", "product_id": "T027827", "product_identification_helper": { "cpe": "cpe:/a:ibm:operational_decision_manager:8.10.x" } } }, { "category": "product_name", "name": "IBM Operational Decision Manager 8.11.x", "product": { "name": "IBM Operational Decision Manager 8.11.x", "product_id": "T027828", "product_identification_helper": { "cpe": "cpe:/a:ibm:operational_decision_manager:8.11.x" } } } ], "category": "product_name", "name": "Operational Decision Manager" } ], "category": "vendor", "name": "IBM" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "McAfee ePolicy Orchestrator 5.3.1", "product": { "name": "McAfee ePolicy Orchestrator 5.3.1", "product_id": "318532", "product_identification_helper": { "cpe": "cpe:/a:mcafee:epolicy_orchestrator:5.3.1" } } }, { "category": "product_name", "name": "McAfee ePolicy Orchestrator 5.3.2", "product": { "name": "McAfee ePolicy Orchestrator 5.3.2", "product_id": "T009959", "product_identification_helper": { "cpe": "cpe:/a:mcafee:epolicy_orchestrator:5.3.2" } } }, { "category": "product_name", "name": "McAfee ePolicy Orchestrator 5.9.0", "product": { "name": "McAfee ePolicy Orchestrator 5.9.0", "product_id": "T009960", "product_identification_helper": { "cpe": "cpe:/a:mcafee:epolicy_orchestrator:5.9.0" } } }, { "category": "product_name", "name": "McAfee ePolicy Orchestrator 5.3.3", "product": { "name": "McAfee ePolicy Orchestrator 5.3.3", "product_id": "T012223", "product_identification_helper": { "cpe": "cpe:/a:mcafee:epolicy_orchestrator:5.3.3" } } }, { "category": "product_name", "name": "McAfee ePolicy Orchestrator 5.3.0", "product": { "name": "McAfee ePolicy Orchestrator 5.3.0", "product_id": "T012224", "product_identification_helper": { "cpe": "cpe:/a:mcafee:epolicy_orchestrator:5.3.0" } } }, { "category": "product_name", "name": "McAfee ePolicy Orchestrator 5.9.1", "product": { "name": "McAfee ePolicy Orchestrator 5.9.1", "product_id": "T012225", "product_identification_helper": { "cpe": "cpe:/a:mcafee:epolicy_orchestrator:5.9.1" } } } ], "category": "product_name", "name": "ePolicy Orchestrator" } ], "category": "vendor", "name": "McAfee" }, { "branches": [ { "category": "product_name", "name": "NetApp OnCommand Unified Manager 7.2", "product": { "name": "NetApp OnCommand Unified Manager 7.2", "product_id": "T011994", "product_identification_helper": { "cpe": "cpe:/a:netapp:oncommand_unified_manager:7.2" } } } ], "category": "vendor", "name": "NetApp" }, { "branches": [ { "category": "product_name", "name": "Open Source CentOS", "product": { "name": "Open Source CentOS", "product_id": "1727", "product_identification_helper": { "cpe": "cpe:/o:centos:centos:-" } } } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Java SE 7u161", "product": { "name": "Oracle Java SE 7u161", "product_id": "T011621", "product_identification_helper": { "cpe": "cpe:/a:oracle:java_se:7u161" } } }, { "category": "product_name", "name": "Oracle Java SE 8u152", "product": { "name": "Oracle Java SE 8u152", "product_id": "T011623", "product_identification_helper": { "cpe": "cpe:/a:oracle:java_se:8u152" } } }, { "category": "product_name", "name": "Oracle Java SE 10", "product": { "name": "Oracle Java SE 10", "product_id": "T012136", "product_identification_helper": { "cpe": "cpe:/a:oracle:java_se:10" } } }, { "category": "product_name", "name": "Oracle Java SE 8u162", "product": { "name": "Oracle Java SE 8u162", "product_id": "T012137", "product_identification_helper": { "cpe": "cpe:/a:oracle:java_se:8u162" } } }, { "category": "product_name", "name": "Oracle Java SE 7u171", "product": { "name": "Oracle Java SE 7u171", "product_id": "T012138", "product_identification_helper": { "cpe": "cpe:/a:oracle:java_se:7u171" } } }, { "category": "product_name", "name": "Oracle Java SE 6u181", "product": { "name": "Oracle Java SE 6u181", "product_id": "T012139", "product_identification_helper": { "cpe": "cpe:/a:oracle:java_se:6u181" } } } ], "category": "product_name", "name": "Java SE" }, { "category": "product_name", "name": "Oracle Linux", "product": { "name": "Oracle Linux", "product_id": "T004914", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux", "product": { "name": "Red Hat Enterprise Linux", "product_id": "67646", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux", "product": { "name": "SUSE Linux", "product_id": "T002207", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_linux:-" } } } ], "category": "vendor", "name": "SUSE" }, { "branches": [ { "category": "product_name", "name": "F5 Enterprise Manager", "product": { "name": "F5 Enterprise Manager", "product_id": "T000125", "product_identification_helper": { "cpe": "cpe:/a:f5:enterprise_manager:-" } } } ], "category": "vendor", "name": "f5" }, { "branches": [ { "category": "product_name", "name": "Oracle Java SE Embedded 8u161", "product": { "name": "Oracle Java SE Embedded 8u161", "product_id": "T002043", "product_identification_helper": { "cpe": "cpe:/a:oracle:java_se_embedded:7.0:update_40" } } }, { "category": "product_name", "name": "Oracle JRockit R28.3.17", "product": { "name": "Oracle JRockit R28.3.17", "product_id": "T012140", "product_identification_helper": { "cpe": "cpe:/a:oracle:jrockit:r28.3.17" } } } ], "category": "vendor", "name": "oracle" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-2783", "notes": [ { "category": "description", "text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T011621", "T012139", "67646", "T011623", "T012137", "T012138", "T012136", "T004914", "T001663", "T009960", "T011994", "T012225", "T004667", "T012223", "318532", "T012224", "T009959", "T012140", "T027827", "T027828", "2951", "T002207", "T000125", "1727", "T002043" ] }, "release_date": "2018-04-17T22:00:00Z", "title": "CVE-2018-2783" }, { "cve": "CVE-2018-2790", "notes": [ { "category": "description", "text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T011621", "T012139", "67646", "T011623", "T012137", "T012138", "T012136", "T004914", "T001663", "T009960", "T011994", "T012225", "T004667", "T012223", "318532", "T012224", "T009959", "T012140", "T027827", "T027828", "2951", "T002207", "T000125", "1727", "T002043" ] }, "release_date": "2018-04-17T22:00:00Z", "title": "CVE-2018-2790" }, { "cve": "CVE-2018-2794", "notes": [ { "category": "description", "text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T011621", "T012139", "67646", "T011623", "T012137", "T012138", "T012136", "T004914", "T001663", "T009960", "T011994", "T012225", "T004667", "T012223", "318532", "T012224", "T009959", "T012140", "T027827", "T027828", "2951", "T002207", "T000125", "1727", "T002043" ] }, "release_date": "2018-04-17T22:00:00Z", "title": "CVE-2018-2794" }, { "cve": "CVE-2018-2795", "notes": [ { "category": "description", "text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T011621", "T012139", "67646", "T011623", "T012137", "T012138", "T012136", "T004914", "T001663", "T009960", "T011994", "T012225", "T004667", "T012223", "318532", "T012224", "T009959", "T012140", "T027827", "T027828", "2951", "T002207", "T000125", "1727", "T002043" ] }, "release_date": "2018-04-17T22:00:00Z", "title": "CVE-2018-2795" }, { "cve": "CVE-2018-2796", "notes": [ { "category": "description", "text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T011621", "T012139", "67646", "T011623", "T012137", "T012138", "T012136", "T004914", "T001663", "T009960", "T011994", "T012225", "T004667", "T012223", "318532", "T012224", "T009959", "T012140", "T027827", "T027828", "2951", "T002207", "T000125", "1727", "T002043" ] }, "release_date": "2018-04-17T22:00:00Z", "title": "CVE-2018-2796" }, { "cve": "CVE-2018-2797", "notes": [ { "category": "description", "text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T011621", "T012139", "67646", "T011623", "T012137", "T012138", "T012136", "T004914", "T001663", "T009960", "T011994", "T012225", "T004667", "T012223", "318532", "T012224", "T009959", "T012140", "T027827", "T027828", "2951", "T002207", "T000125", "1727", "T002043" ] }, "release_date": "2018-04-17T22:00:00Z", "title": "CVE-2018-2797" }, { "cve": "CVE-2018-2798", "notes": [ { "category": "description", "text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T011621", "T012139", "67646", "T011623", "T012137", "T012138", "T012136", "T004914", "T001663", "T009960", "T011994", "T012225", "T004667", "T012223", "318532", "T012224", "T009959", "T012140", "T027827", "T027828", "2951", "T002207", "T000125", "1727", "T002043" ] }, "release_date": "2018-04-17T22:00:00Z", "title": "CVE-2018-2798" }, { "cve": "CVE-2018-2799", "notes": [ { "category": "description", "text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T011621", "T012139", "67646", "T011623", "T012137", "T012138", "T012136", "T004914", "T001663", "T009960", "T011994", "T012225", "T004667", "T012223", "318532", "T012224", "T009959", "T012140", "T027827", "T027828", "2951", "T002207", "T000125", "1727", "T002043" ] }, "release_date": "2018-04-17T22:00:00Z", "title": "CVE-2018-2799" }, { "cve": "CVE-2018-2800", "notes": [ { "category": "description", "text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T011621", "T012139", "67646", "T011623", "T012137", "T012138", "T012136", "T004914", "T001663", "T009960", "T011994", "T012225", "T004667", "T012223", "318532", "T012224", "T009959", "T012140", "T027827", "T027828", "2951", "T002207", "T000125", "1727", "T002043" ] }, "release_date": "2018-04-17T22:00:00Z", "title": "CVE-2018-2800" }, { "cve": "CVE-2018-2811", "notes": [ { "category": "description", "text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T011621", "T012139", "67646", "T011623", "T012137", "T012138", "T012136", "T004914", "T001663", "T009960", "T011994", "T012225", "T004667", "T012223", "318532", "T012224", "T009959", "T012140", "T027827", "T027828", "2951", "T002207", "T000125", "1727", "T002043" ] }, "release_date": "2018-04-17T22:00:00Z", "title": "CVE-2018-2811" }, { "cve": "CVE-2018-2814", "notes": [ { "category": "description", "text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T011621", "T012139", "67646", "T011623", "T012137", "T012138", "T012136", "T004914", "T001663", "T009960", "T011994", "T012225", "T004667", "T012223", "318532", "T012224", "T009959", "T012140", "T027827", "T027828", "2951", "T002207", "T000125", "1727", "T002043" ] }, "release_date": "2018-04-17T22:00:00Z", "title": "CVE-2018-2814" }, { "cve": "CVE-2018-2815", "notes": [ { "category": "description", "text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T011621", "T012139", "67646", "T011623", "T012137", "T012138", "T012136", "T004914", "T001663", "T009960", "T011994", "T012225", "T004667", "T012223", "318532", "T012224", "T009959", "T012140", "T027827", "T027828", "2951", "T002207", "T000125", "1727", "T002043" ] }, "release_date": "2018-04-17T22:00:00Z", "title": "CVE-2018-2815" }, { "cve": "CVE-2018-2825", "notes": [ { "category": "description", "text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T011621", "T012139", "67646", "T011623", "T012137", "T012138", "T012136", "T004914", "T001663", "T009960", "T011994", "T012225", "T004667", "T012223", "318532", "T012224", "T009959", "T012140", "T027827", "T027828", "2951", "T002207", "T000125", "1727", "T002043" ] }, "release_date": "2018-04-17T22:00:00Z", "title": "CVE-2018-2825" }, { "cve": "CVE-2018-2826", "notes": [ { "category": "description", "text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T011621", "T012139", "67646", "T011623", "T012137", "T012138", "T012136", "T004914", "T001663", "T009960", "T011994", "T012225", "T004667", "T012223", "318532", "T012224", "T009959", "T012140", "T027827", "T027828", "2951", "T002207", "T000125", "1727", "T002043" ] }, "release_date": "2018-04-17T22:00:00Z", "title": "CVE-2018-2826" } ] }
wid-sec-w-2023-0531
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "kritisch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Die IBM SAN Volume Controller Software wird mit SAN Volume Controller Storage Engines ausgliefert und dient zur Steuerung und Verwaltung von IBM SANs. Zur Verwaltung bietet sie ein Webinterface.\r\nIBM Storwize ist ein virtualisiertes Speichersystem f\u00fcr virtualisierte Serverumgebungen.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 ausnutzen, um dadurch die Integrit\u00e4t, Vertraulichkeit und Verf\u00fcgbarkeit zu gef\u00e4hrden.", "title": "Angriff" }, { "category": "general", "text": "- Applicance", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-0531 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2019/wid-sec-w-2023-0531.json" }, { "category": "self", "summary": "WID-SEC-2023-0531 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0531" }, { "category": "external", "summary": "IBM Security Bulletin 872546 vom 2023-02-17", "url": "http://www.ibm.com/support/pages/node/872546" }, { "category": "external", "summary": "IBM Security Bulletins vom 2019-02-25", "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10872550" }, { "category": "external", "summary": "IBM Security Bulletins vom 2019-02-25", "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10872546" }, { "category": "external", "summary": "IBM Security Bulletins vom 2019-02-25", "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10872486" }, { "category": "external", "summary": "IBM Security Bulletins vom 2019-02-25", "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10872364" }, { "category": "external", "summary": "IBM Security Bulletins vom 2019-02-25", "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10872456" }, { "category": "external", "summary": "IBM Security Bulletins vom 2019-02-25", "url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10741135" } ], "source_lang": "en-US", "title": "IBM SAN Volume Controller: Mehrere Schwachstellen", "tracking": { "current_release_date": "2023-02-28T23:00:00.000+00:00", "generator": { "date": "2024-02-15T17:17:32.488+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2023-0531", "initial_release_date": "2019-02-25T23:00:00.000+00:00", "revision_history": [ { "date": "2019-02-25T23:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2023-02-28T23:00:00.000+00:00", "number": "2", "summary": "Neue Updates von IBM aufgenommen" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "IBM FlashSystem \u003c 7.8.1.8", "product": { "name": "IBM FlashSystem \u003c 7.8.1.8", "product_id": "T026586", "product_identification_helper": { "cpe": "cpe:/a:ibm:flashsystem:7.8.1.8" } } }, { "category": "product_name", "name": "IBM FlashSystem \u003c 8.1.3.4", "product": { "name": "IBM FlashSystem \u003c 8.1.3.4", "product_id": "T026587", "product_identification_helper": { "cpe": "cpe:/a:ibm:flashsystem:8.1.3.4" } } }, { "category": "product_name", "name": "IBM FlashSystem \u003c 8.2.0.2", "product": { "name": "IBM FlashSystem \u003c 8.2.0.2", "product_id": "T026588", "product_identification_helper": { "cpe": "cpe:/a:ibm:flashsystem:8.2.0.2" } } }, { "category": "product_name", "name": "IBM FlashSystem \u003c 8.2.1.0", "product": { "name": "IBM FlashSystem \u003c 8.2.1.0", "product_id": "T026589", "product_identification_helper": { "cpe": "cpe:/a:ibm:flashsystem:8.2.1.0" } } } ], "category": "product_name", "name": "FlashSystem" }, { "branches": [ { "category": "product_name", "name": "IBM SAN Volume Controller", "product": { "name": "IBM SAN Volume Controller", "product_id": "T002782", "product_identification_helper": { "cpe": "cpe:/a:ibm:san_volume_controller:-" } } }, { "category": "product_name", "name": "IBM SAN Volume Controller \u003c 7.8.1.8", "product": { "name": "IBM SAN Volume Controller \u003c 7.8.1.8", "product_id": "T026578", "product_identification_helper": { "cpe": "cpe:/a:ibm:san_volume_controller:7.8.1.8" } } }, { "category": "product_name", "name": "IBM SAN Volume Controller \u003c 8.1.3.4", "product": { "name": "IBM SAN Volume Controller \u003c 8.1.3.4", "product_id": "T026579", "product_identification_helper": { "cpe": "cpe:/a:ibm:san_volume_controller:8.1.3.4" } } }, { "category": "product_name", "name": "IBM SAN Volume Controller \u003c 8.2.0.2", "product": { "name": "IBM SAN Volume Controller \u003c 8.2.0.2", "product_id": "T026580", "product_identification_helper": { "cpe": "cpe:/a:ibm:san_volume_controller:8.2.0.2" } } }, { "category": "product_name", "name": "IBM SAN Volume Controller \u003c 8.2.1.0", "product": { "name": "IBM SAN Volume Controller \u003c 8.2.1.0", "product_id": "T026581", "product_identification_helper": { "cpe": "cpe:/a:ibm:san_volume_controller:8.2.1.0" } } } ], "category": "product_name", "name": "SAN Volume Controller" }, { "branches": [ { "category": "product_name", "name": "IBM Storwize \u003c 7.8.1.8", "product": { "name": "IBM Storwize \u003c 7.8.1.8", "product_id": "T026582", "product_identification_helper": { "cpe": "cpe:/a:ibm:storwize:7.8.1.8" } } }, { "category": "product_name", "name": "IBM Storwize \u003c 8.1.3.4", "product": { "name": "IBM Storwize \u003c 8.1.3.4", "product_id": "T026583", "product_identification_helper": { "cpe": "cpe:/a:ibm:storwize:8.1.3.4" } } }, { "category": "product_name", "name": "IBM Storwize \u003c 8.2.0.2", "product": { "name": "IBM Storwize \u003c 8.2.0.2", "product_id": "T026584", "product_identification_helper": { "cpe": "cpe:/a:ibm:storwize:8.2.0.2" } } }, { "category": "product_name", "name": "IBM Storwize \u003c 8.2.1.0", "product": { "name": "IBM Storwize \u003c 8.2.1.0", "product_id": "T026585", "product_identification_helper": { "cpe": "cpe:/a:ibm:storwize:8.2.1.0" } } } ], "category": "product_name", "name": "Storwize" } ], "category": "vendor", "name": "IBM" }, { "branches": [ { "category": "product_name", "name": "IBM Storwize V3500", "product": { "name": "IBM Storwize V3500", "product_id": "T002778", "product_identification_helper": { "cpe": "cpe:/h:ibm:storwize_v3500:-" } } }, { "category": "product_name", "name": "IBM Storwize V3700", "product": { "name": "IBM Storwize V3700", "product_id": "T002779", "product_identification_helper": { "cpe": "cpe:/h:ibm:storwize_v3700:-" } } }, { "category": "product_name", "name": "IBM Storwize V5000", "product": { "name": "IBM Storwize V5000", "product_id": "T002780", "product_identification_helper": { "cpe": "cpe:/h:ibm:storwize_v5000:-" } } }, { "category": "product_name", "name": "IBM Storwize V7000", "product": { "name": "IBM Storwize V7000", "product_id": "T000482", "product_identification_helper": { "cpe": "cpe:/h:ibm:storwize_v7000:-" } } } ], "category": "vendor", "name": "ibm" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-17449", "notes": [ { "category": "description", "text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T026581", "T002780", "T026582", "T002782", "T026580", "T002778", "T002779", "T026578", "T026589", "T026579", "T026587", "T026588", "T026585", "T000482", "T026586", "T026583", "T026584" ] }, "release_date": "2019-02-25T23:00:00Z", "title": "CVE-2017-17449" }, { "cve": "CVE-2017-17833", "notes": [ { "category": "description", "text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T026581", "T002780", "T026582", "T002782", "T026580", "T002778", "T002779", "T026578", "T026589", "T026579", "T026587", "T026588", "T026585", "T000482", "T026586", "T026583", "T026584" ] }, "release_date": "2019-02-25T23:00:00Z", "title": "CVE-2017-17833" }, { "cve": "CVE-2017-18017", "notes": [ { "category": "description", "text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T026581", "T002780", "T026582", "T002782", "T026580", "T002778", "T002779", "T026578", "T026589", "T026579", "T026587", "T026588", "T026585", "T000482", "T026586", "T026583", "T026584" ] }, "release_date": "2019-02-25T23:00:00Z", "title": "CVE-2017-18017" }, { "cve": "CVE-2018-11784", "notes": [ { "category": "description", "text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T026581", "T002780", "T026582", "T002782", "T026580", "T002778", "T002779", "T026578", "T026589", "T026579", "T026587", "T026588", "T026585", "T000482", "T026586", "T026583", "T026584" ] }, "release_date": "2019-02-25T23:00:00Z", "title": "CVE-2018-11784" }, { "cve": "CVE-2018-12539", "notes": [ { "category": "description", "text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T026581", "T002780", "T026582", "T002782", "T026580", "T002778", "T002779", "T026578", "T026589", "T026579", "T026587", "T026588", "T026585", "T000482", "T026586", "T026583", "T026584" ] }, "release_date": "2019-02-25T23:00:00Z", "title": "CVE-2018-12539" }, { "cve": "CVE-2018-1517", "notes": [ { "category": "description", "text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T026581", "T002780", "T026582", "T002782", "T026580", "T002778", "T002779", "T026578", "T026589", "T026579", "T026587", "T026588", "T026585", "T000482", "T026586", "T026583", "T026584" ] }, "release_date": "2019-02-25T23:00:00Z", "title": "CVE-2018-1517" }, { "cve": "CVE-2018-1775", "notes": [ { "category": "description", "text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T026581", "T002780", "T026582", "T002782", "T026580", "T002778", "T002779", "T026578", "T026589", "T026579", "T026587", "T026588", "T026585", "T000482", "T026586", "T026583", "T026584" ] }, "release_date": "2019-02-25T23:00:00Z", "title": "CVE-2018-1775" }, { "cve": "CVE-2018-2783", "notes": [ { "category": "description", "text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T026581", "T002780", "T026582", "T002782", "T026580", "T002778", "T002779", "T026578", "T026589", "T026579", "T026587", "T026588", "T026585", "T000482", "T026586", "T026583", "T026584" ] }, "release_date": "2019-02-25T23:00:00Z", "title": "CVE-2018-2783" }, { "cve": "CVE-2018-5732", "notes": [ { "category": "description", "text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T026581", "T002780", "T026582", "T002782", "T026580", "T002778", "T002779", "T026578", "T026589", "T026579", "T026587", "T026588", "T026585", "T000482", "T026586", "T026583", "T026584" ] }, "release_date": "2019-02-25T23:00:00Z", "title": "CVE-2018-5732" } ] }
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.