RHSA-2010:0770: java-1.6.0-sun security update

TI-2009-03392 CVE-2009-3555 · GHSA-f7w7-6pjc-wwm6

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft…

CRITICAL 91

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.87264 Published 2009-11-09 Fixed in 7.0.10, 6.0.32 +1 CWE-300

TI-2010-03392 CVE-2010-3563 · GHSA-fj9r-jhxx-vm9v

Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for…

HIGH 84

Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.8425 Published 2010-10-19 Fixed

TI-2010-03381 CVE-2010-3552 · GHSA-3rv7-vfgw-fvwj

Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java…

HIGH 83

Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.8074 Published 2010-10-19 Fixed

TI-2010-03400 CVE-2010-3571 · GHSA-wrrm-3qvm-g7qm

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 55

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09146 Published 2010-10-19 Fixed

TI-2010-03388 CVE-2010-3559 · GHSA-vj8f-hqf8-qh5x

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business…

MEDIUM 55

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability v…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09711 Published 2010-10-19 Fixed

TI-2010-03398 CVE-2010-3569 · GHSA-gxmw-9pmp-92hq

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and avail…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07099 Published 2010-10-19 Fixed

TI-2010-03391 CVE-2010-3562 · GHSA-7242-cf77-68qm

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 53

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07099 Published 2010-10-19 Fixed

TI-2010-03395 CVE-2010-3566 · GHSA-95wc-36p6-5x3p

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 52

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update and 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05885 Published 2010-10-19 Fixed

TI-2010-03403 CVE-2010-3574 · GHSA-6gvj-cjgc-qxmv

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

MEDIUM 51

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2010-10-19 Fixed

TI-2010-03401 CVE-2010-3572 · GHSA-58vp-fj3h-8rjv

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business…

MEDIUM 51

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability v…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05193 Published 2010-10-19 Fixed

TI-2010-03397 CVE-2010-3568 · GHSA-jmxm-vpv4-jjr2

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and…

MEDIUM 51

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and avail…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2010-10-19 Fixed

TI-2010-03396 CVE-2010-3567 · GHSA-4mq8-fgx6-fqpv

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 51

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2010-10-19 Fixed

TI-2010-03394 CVE-2010-3565 · GHSA-h9j4-m2pf-hmrh

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 51

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown ve…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05616 Published 2010-10-19 Fixed

TI-2010-03387 CVE-2010-3558 · GHSA-h8rv-q3m4-j86c

Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for…

MEDIUM 51

Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2010-10-19 Fixed

TI-2010-03385 CVE-2010-3556 · GHSA-65g6-r5w2-5m6f

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 51

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05193 Published 2010-10-19 Fixed

TI-2010-03384 CVE-2010-3555 · GHSA-f2gj-f7q5-jjg4

Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for…

MEDIUM 51

Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.07968 Published 2010-10-19 Fixed

TI-2010-03383 CVE-2010-3554 · GHSA-hw7f-56q4-38gg

Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business…

MEDIUM 51

Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability v…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2010-10-19 Fixed

TI-2010-03382 CVE-2010-3553 · GHSA-2v8j-qh76-qvv8

Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business…

MEDIUM 51

Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability v…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2010-10-19 Fixed

TI-2010-03379 CVE-2010-3550 · GHSA-m6fr-478g-xrmj

Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for…

MEDIUM 47

Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown v…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04427 Published 2010-10-19 Fixed

TI-2010-03399 CVE-2010-3570 · GHSA-46xf-6pjq-m8hr

Unspecified vulnerability in the Deployment Toolkit component in Oracle Java SE and Java…

MEDIUM 40

Unspecified vulnerability in the Deployment Toolkit component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.03897 Published 2010-10-19 Fixed

TI-2010-01276 CVE-2010-1321 · GHSA-pcm6-6x97-2mrc

The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT…

MEDIUM 40

The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for inva…

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.06884 Published 2010-05-19 Fixed CWE-476

TI-2010-03390 CVE-2010-3561 · GHSA-jmhr-w45r-wv9q

Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business…

LOW 39

Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03356 Published 2010-10-19 Fixed

TI-2010-03402 CVE-2010-3573 · GHSA-hv45-8vp2-m2c8

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

LOW 36

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vecto…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.10557 Published 2010-10-19 Fixed

TI-2010-03378 CVE-2010-3549 · GHSA-jf8h-wqmh-2m6x

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

LOW 36

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03337 Published 2010-10-19 Fixed

TI-2010-03386 CVE-2010-3557 · GHSA-6jxx-vp42-6rcv

Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business…

LOW 35

Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability v…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02879 Published 2010-10-19 Fixed

TI-2010-03371 CVE-2010-3541 · GHSA-wp5h-xwhh-9fw3

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

LOW 29

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.03102 Published 2010-10-19 Fixed

TI-2010-03380 CVE-2010-3551 · GHSA-m34f-4vjh-jxj4

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

LOW 28

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02999 Published 2010-10-19 Fixed

TI-2010-03377 CVE-2010-3548 · GHSA-mp8j-7g6r-hj45

Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in…

LOW 28

Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02999 Published 2010-10-19 Fixed

TI-2010-03389 CVE-2010-3560 · GHSA-4292-w862-9w9c

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

LOW 18

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality via unknown vectors.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02681 Published 2010-10-19 Fixed

RHSA-2010:0770

Fixed in

Fixes 29 records