rhsa-2017_3046
Vulnerability from csaf_redhat
Published
2017-10-24 12:14
Modified
2024-11-14 21:45
Summary
Red Hat Security Advisory: java-1.7.0-oracle security update
Notes
Topic
An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.
This update upgrades Oracle Java SE 7 to version 7 Update 161.
Security Fix(es):
* This update fixes multiple vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page listed in the References section. (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843, CVE-2016-10165, CVE-2017-10274, CVE-2017-10281, CVE-2017-10285, CVE-2017-10293, CVE-2017-10295, CVE-2017-10345, CVE-2017-10346, CVE-2017-10347, CVE-2017-10348, CVE-2017-10349, CVE-2017-10350, CVE-2017-10355, CVE-2017-10356, CVE-2017-10357, CVE-2017-10388)
Note: Starting with this update, Java web browser plugin and Java Web Start application are no longer included with Oracle Java SE 7. Refer to the Releases Notes and the Oracle Java SE Support Roadmap pages linked to in the References section for further information about this change.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 7 to version 7 Update 161.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page listed in the References section. (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843, CVE-2016-10165, CVE-2017-10274, CVE-2017-10281, CVE-2017-10285, CVE-2017-10293, CVE-2017-10295, CVE-2017-10345, CVE-2017-10346, CVE-2017-10347, CVE-2017-10348, CVE-2017-10349, CVE-2017-10350, CVE-2017-10355, CVE-2017-10356, CVE-2017-10357, CVE-2017-10388)\n\nNote: Starting with this update, Java web browser plugin and Java Web Start application are no longer included with Oracle Java SE 7. Refer to the Releases Notes and the Oracle Java SE Support Roadmap pages linked to in the References section for further information about this change.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:3046",
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_161",
"url": "http://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_161"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/java/javase/eol-135779.html",
"url": "http://www.oracle.com/technetwork/java/javase/eol-135779.html"
},
{
"category": "external",
"summary": "1367357",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1367357"
},
{
"category": "external",
"summary": "1402345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345"
},
{
"category": "external",
"summary": "1402346",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402346"
},
{
"category": "external",
"summary": "1402348",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348"
},
{
"category": "external",
"summary": "1402351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402351"
},
{
"category": "external",
"summary": "1501868",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501868"
},
{
"category": "external",
"summary": "1501873",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501873"
},
{
"category": "external",
"summary": "1502038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502038"
},
{
"category": "external",
"summary": "1502053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502053"
},
{
"category": "external",
"summary": "1502611",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502611"
},
{
"category": "external",
"summary": "1502614",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502614"
},
{
"category": "external",
"summary": "1502629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502629"
},
{
"category": "external",
"summary": "1502632",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502632"
},
{
"category": "external",
"summary": "1502640",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502640"
},
{
"category": "external",
"summary": "1502649",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502649"
},
{
"category": "external",
"summary": "1502687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502687"
},
{
"category": "external",
"summary": "1502858",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502858"
},
{
"category": "external",
"summary": "1502869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502869"
},
{
"category": "external",
"summary": "1503169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503169"
},
{
"category": "external",
"summary": "1503320",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503320"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3046.json"
}
],
"title": "Red Hat Security Advisory: java-1.7.0-oracle security update",
"tracking": {
"current_release_date": "2024-11-14T21:45:41+00:00",
"generator": {
"date": "2024-11-14T21:45:41+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:3046",
"initial_release_date": "2017-10-24T12:14:29+00:00",
"revision_history": [
{
"date": "2017-10-24T12:14:29+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-12-14T15:24:06+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:45:41+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Server 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
}
],
"category": "product_family",
"name": "Oracle Java for Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"product": {
"name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"product_id": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.161-1jpp.4.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"product": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"product_id": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.161-1jpp.4.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"product": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.161-1jpp.4.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"product": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"product_id": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.161-1jpp.4.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"product": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"product_id": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.161-1jpp.4.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"product": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"product_id": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.161-1jpp.4.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"product": {
"name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"product_id": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.161-1jpp.3.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"product": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"product_id": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.161-1jpp.3.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"product": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"product_id": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.161-1jpp.3.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"product": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.161-1jpp.3.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"product": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"product_id": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.161-1jpp.3.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"product": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"product_id": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.161-1jpp.3.el6?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"product": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"product_id": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.161-1jpp.4.el7?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"product": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"product_id": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.161-1jpp.4.el7?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"product": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"product_id": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.161-1jpp.3.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"product": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"product_id": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.161-1jpp.3.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"product": {
"name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"product_id": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.161-1jpp.3.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"product": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.161-1jpp.3.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"product": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"product_id": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.161-1jpp.3.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"product": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"product_id": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.161-1jpp.3.el6?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9840",
"discovery_date": "2016-12-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402345"
}
],
"notes": [
{
"category": "description",
"text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "zlib: Out-of-bounds pointer arithmetic in inftrees.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9840"
},
{
"category": "external",
"summary": "RHBZ#1402345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9840",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9840"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9840",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9840"
},
{
"category": "external",
"summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7",
"url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7"
},
{
"category": "external",
"summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf",
"url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf"
}
],
"release_date": "2016-09-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "zlib: Out-of-bounds pointer arithmetic in inftrees.c"
},
{
"cve": "CVE-2016-9841",
"discovery_date": "2016-12-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402346"
}
],
"notes": [
{
"category": "description",
"text": "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "zlib: Out-of-bounds pointer arithmetic in inffast.c",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9841"
},
{
"category": "external",
"summary": "RHBZ#1402346",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402346"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9841",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9841"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9841",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9841"
},
{
"category": "external",
"summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7",
"url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7"
},
{
"category": "external",
"summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf",
"url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf"
}
],
"release_date": "2016-09-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "zlib: Out-of-bounds pointer arithmetic in inffast.c"
},
{
"cve": "CVE-2016-9842",
"discovery_date": "2016-12-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402348"
}
],
"notes": [
{
"category": "description",
"text": "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "zlib: Undefined left shift of negative number",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9842"
},
{
"category": "external",
"summary": "RHBZ#1402348",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9842",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9842"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9842",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9842"
},
{
"category": "external",
"summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7",
"url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7"
},
{
"category": "external",
"summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf",
"url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf"
}
],
"release_date": "2016-09-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "zlib: Undefined left shift of negative number"
},
{
"cve": "CVE-2016-9843",
"discovery_date": "2016-12-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402351"
}
],
"notes": [
{
"category": "description",
"text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "zlib: Big-endian out-of-bounds pointer",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9843"
},
{
"category": "external",
"summary": "RHBZ#1402351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9843",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9843"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9843",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9843"
},
{
"category": "external",
"summary": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7",
"url": "https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7"
},
{
"category": "external",
"summary": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf",
"url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf"
}
],
"release_date": "2016-09-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "zlib: Big-endian out-of-bounds pointer"
},
{
"cve": "CVE-2016-10165",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2016-08-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1367357"
}
],
"notes": [
{
"category": "description",
"text": "The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lcms2: Out-of-bounds read in Type_MLU_Read()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-10165"
},
{
"category": "external",
"summary": "RHBZ#1367357",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1367357"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-10165",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-10165"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-10165",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-10165"
}
],
"release_date": "2016-08-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "lcms2: Out-of-bounds read in Type_MLU_Read()"
},
{
"cve": "CVE-2017-10274",
"discovery_date": "2017-10-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1502053"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data as well as unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-10274"
},
{
"category": "external",
"summary": "RHBZ#1502053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502053"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-10274",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10274"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10274",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10274"
}
],
"release_date": "2017-10-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026)"
},
{
"cve": "CVE-2017-10281",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2017-10-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1502649"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-10281"
},
{
"category": "external",
"summary": "RHBZ#1502649",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502649"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-10281",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10281"
}
],
"release_date": "2017-10-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)"
},
{
"cve": "CVE-2017-10285",
"discovery_date": "2017-10-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1501868"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-10285"
},
{
"category": "external",
"summary": "RHBZ#1501868",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501868"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-10285",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10285"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10285",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10285"
}
],
"release_date": "2017-10-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966)"
},
{
"cve": "CVE-2017-10293",
"discovery_date": "2017-10-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1503320"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u171, 7u161, 8u151, and 9.0.1 (Javadoc)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-10293"
},
{
"category": "external",
"summary": "RHBZ#1503320",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503320"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-10293",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10293"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10293",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10293"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA"
}
],
"release_date": "2017-10-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u171, 7u161, 8u151, and 9.0.1 (Javadoc)"
},
{
"cve": "CVE-2017-10295",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"discovery_date": "2017-10-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1502687"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the HttpURLConnection and HttpsURLConnection classes in the Networking component of OpenJDK failed to check for newline characters embedded in URLs. An attacker able to make a Java application perform an HTTP request using an attacker provided URL could possibly inject additional headers into the request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-10295"
},
{
"category": "external",
"summary": "RHBZ#1502687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-10295",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10295"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10295",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10295"
}
],
"release_date": "2017-10-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)"
},
{
"cve": "CVE-2017-10345",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2017-10-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1502858"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-10345"
},
{
"category": "external",
"summary": "RHBZ#1502858",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502858"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-10345",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10345"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10345",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10345"
}
],
"release_date": "2017-10-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370)"
},
{
"cve": "CVE-2017-10346",
"discovery_date": "2017-10-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1501873"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-10346"
},
{
"category": "external",
"summary": "RHBZ#1501873",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1501873"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-10346",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10346"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10346",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10346"
}
],
"release_date": "2017-10-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711)"
},
{
"cve": "CVE-2017-10347",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2017-10-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1502632"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-10347"
},
{
"category": "external",
"summary": "RHBZ#1502632",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502632"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-10347",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10347"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10347",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10347"
}
],
"release_date": "2017-10-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)"
},
{
"cve": "CVE-2017-10348",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2017-10-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1502629"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-10348"
},
{
"category": "external",
"summary": "RHBZ#1502629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-10348",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10348"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10348",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10348"
}
],
"release_date": "2017-10-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432)"
},
{
"cve": "CVE-2017-10349",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2017-10-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1502611"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-10349"
},
{
"category": "external",
"summary": "RHBZ#1502611",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502611"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-10349",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10349"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10349",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10349"
}
],
"release_date": "2017-10-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)"
},
{
"cve": "CVE-2017-10350",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2017-10-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1502640"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-10350"
},
{
"category": "external",
"summary": "RHBZ#1502640",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502640"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-10350",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10350"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10350",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10350"
}
],
"release_date": "2017-10-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100)"
},
{
"cve": "CVE-2017-10355",
"discovery_date": "2017-10-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1502869"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the FtpClient implementation in the Networking component of OpenJDK did not set connect and read timeouts by default. A malicious FTP server or a man-in-the-middle attacker could use this flaw to block execution of a Java application connecting to an FTP server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-10355"
},
{
"category": "external",
"summary": "RHBZ#1502869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-10355",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10355"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10355",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10355"
}
],
"release_date": "2017-10-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612)"
},
{
"cve": "CVE-2017-10356",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2017-10-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1503169"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the Security component of OpenJDK generated weak password-based encryption keys used to protect private keys stored in key stores. This made it easier to perform password guessing attacks to decrypt stored keys if an attacker could gain access to a key store.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-10356"
},
{
"category": "external",
"summary": "RHBZ#1503169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503169"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-10356",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10356"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10356",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10356"
}
],
"release_date": "2017-10-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)"
},
{
"cve": "CVE-2017-10357",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2017-10-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1502614"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-10357"
},
{
"category": "external",
"summary": "RHBZ#1502614",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502614"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-10357",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10357"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10357",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10357"
}
],
"release_date": "2017-10-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)"
},
{
"cve": "CVE-2017-10388",
"cwe": {
"id": "CWE-345",
"name": "Insufficient Verification of Data Authenticity"
},
"discovery_date": "2017-10-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1502038"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the Kerberos client implementation in the Libraries component of OpenJDK used the sname field from the plain text part rather than encrypted part of the KDC reply message. A man-in-the-middle attacker could possibly use this flaw to impersonate Kerberos services to Java applications acting as Kerberos clients.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-10388"
},
{
"category": "external",
"summary": "RHBZ#1502038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1502038"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-10388",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10388"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10388",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10388"
}
],
"release_date": "2017-10-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-10-24T12:14:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:3046"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.3.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.3.el6.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.161-1jpp.4.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.161-1jpp.4.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794)"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.