Red Hat Security Advisory

RHSA-2011:0282

java-1.6.0-sun security update

Released 2011-02-17 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Desktop version 4 Extras java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el4 +9
Red Hat Enterprise Linux AS version 4 Extras java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el4 +9
Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-sun-1:1.6.0.24-1jpp.1.el5, java-1.6.0-sun-1:1.6.0.24-1jpp.1.el5.i586, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el5 +9
Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.24-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.24-1jpp.1.el6 +3
Red Hat Enterprise Linux ES version 4 Extras java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el4 +9
Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.24-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.24-1jpp.1.el6 +1
Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-sun-1:1.6.0.24-1jpp.1.el5, java-1.6.0-sun-1:1.6.0.24-1jpp.1.el5.i586, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el5 +9
Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.24-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.24-1jpp.1.el6 +3
Red Hat Enterprise Linux WS version 4 Extras java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el4 +9
Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.24-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.24-1jpp.1.el6 +3

Fixes 20 records

TI-2010-04185 CVE-2010-4452 · GHSA-mq39-jwgr-3jxw

Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE)…

HIGH 84

Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Ja…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.83037 Published 2011-02-17 Fixed

TI-2010-04206 CVE-2010-4473 · GHSA-pq9h-x7ww-cqrg

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

MEDIUM 51

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05489 Published 2011-02-17 Fixed

TI-2010-04195 CVE-2010-4462 · GHSA-63ph-j5mq-mmjf

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

MEDIUM 51

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05489 Published 2011-02-17 Fixed

TI-2010-04187 CVE-2010-4454 · GHSA-vp2p-mr7x-53m2

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

MEDIUM 51

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05489 Published 2011-02-17 Fixed

TI-2010-04198 CVE-2010-4465 · GHSA-47vr-m75r-g978

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

MEDIUM 50

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04132 Published 2011-02-17 Fixed

TI-2010-04202 CVE-2010-4469 · GHSA-34fq-m8qx-w3x4

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

MEDIUM 48

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02921 Published 2011-02-17 Fixed

TI-2010-04200 CVE-2010-4467 · GHSA-q7pq-72jp-3392

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

MEDIUM 48

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 10 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to af…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02737 Published 2011-02-17 Fixed

TI-2010-04196 CVE-2010-4463 · GHSA-p9wg-9276-53fv

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

MEDIUM 47

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 21 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to af…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02415 Published 2011-02-17 Fixed

TI-2010-04209 CVE-2010-4476 · GHSA-gvgc-rxmh-5hvw

The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and…

MEDIUM 43

The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb,…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.2349 Published 2011-02-17 Fixed in 7.0.7, 6.0.32 +1

TI-2010-04184 CVE-2010-4451 · GHSA-w6v8-4hwp-rvq3

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

LOW 39

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Windows, when using Java Update, allows remote attackers to affect confidentiality, inte…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.03441 Published 2011-02-17 Fixed

TI-2010-04155 CVE-2010-4422 · GHSA-4xxc-4hqj-j8vc

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

LOW 39

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown v…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.03444 Published 2011-02-17 Fixed

TI-2010-04203 CVE-2010-4470 · GHSA-rgfv-57h2-99r6

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

LOW 29

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows remote attackers to affect availability via unknown vectors related to JAXP and…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03475 Published 2011-02-17 Fixed

TI-2010-04199 CVE-2010-4466 · GHSA-wchx-r84v-92xj

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

LOW 28

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Windows, Solaris, and, Linux; 5.0 Update 27 and earlier for Windows; and 1.4.2_29 and ea…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02523 Published 2011-02-17 Fixed

TI-2010-04204 CVE-2010-4471 · GHSA-6jc7-hhf7-27hm

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

LOW 27

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier allows remote untrusted Java Web Start applications and untru…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02275 Published 2011-02-17 Fixed

TI-2010-04208 CVE-2010-4475 · GHSA-6p4c-6mx2-r9cv

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

LOW 25

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02321 Published 2011-02-17 Fixed

TI-2010-04180 CVE-2010-4447 · GHSA-w4x5-vg67-qgh9

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

LOW 24

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02236 Published 2011-02-17 Fixed

TI-2010-04201 CVE-2010-4468 · GHSA-468p-vxcq-gqg2

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

LOW 23

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier, allows remote untrusted Java Web Start applications and untr…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.01959 Published 2011-02-17 Fixed

TI-2010-04205 CVE-2010-4472 · GHSA-2qxc-rxrw-rpvh

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

LOW 19

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect availability, related to XML Digital Signature and unspeci…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03006 Published 2011-02-17 Fixed

TI-2010-04183 CVE-2010-4450 · GHSA-g2rr-vj8j-6grg

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

LOW 18

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Solaris and Linux; 5.0 Update 27 and earlier for Solaris and Linux; and 1.4.2_29 and ear…

CVSS 2.0LOW 3.7 Local No auth Interaction — EPSS 0.00411 Published 2011-02-17 Fixed

TI-2010-04181 CVE-2010-4448 · GHSA-q763-247f-jf2v

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

LOW 18

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 earlier allows remote untrusted Java Web Start appl…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02407 Published 2011-02-17 Fixed