Red Hat Security AdvisoryRHSA-2011:1159
java-1.4.2-ibm security update
Released 2011-08-15 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 4 Extras java-1.4.2-ibm-1.4.2.13.10-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.10-1jpp.1.el4.i386, java-1.4.2-ibm-demo-1.4.2.13.10-1jpp.1.el4 +9
- Red Hat Enterprise Linux AS version 4 Extras java-1.4.2-ibm-1.4.2.13.10-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.10-1jpp.1.el4.i386, java-1.4.2-ibm-1.4.2.13.10-1jpp.1.el4.ia64 +20
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.4.2-ibm-1.4.2.13.10-1jpp.1.el5, java-1.4.2-ibm-1.4.2.13.10-1jpp.1.el5.i386, java-1.4.2-ibm-demo-1.4.2.13.10-1jpp.1.el5 +9
- Red Hat Enterprise Linux ES version 4 Extras java-1.4.2-ibm-1.4.2.13.10-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.10-1jpp.1.el4.i386, java-1.4.2-ibm-1.4.2.13.10-1jpp.1.el4.ia64 +13
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.4.2-ibm-1.4.2.13.10-1jpp.1.el5, java-1.4.2-ibm-1.4.2.13.10-1jpp.1.el5.i386, java-1.4.2-ibm-1.4.2.13.10-1jpp.1.el5.ia64 +20
- Red Hat Enterprise Linux WS version 4 Extras java-1.4.2-ibm-1.4.2.13.10-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.10-1jpp.1.el4.i386, java-1.4.2-ibm-1.4.2.13.10-1jpp.1.el4.ia64 +13
Fixes 8 records
Priority MEDIUM 52
Multiple unspecified vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allow remote attackers to affect confide…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06329 · Published 2011-06-14 · Fixed
Priority MEDIUM 52
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote attackers to affect confidentiality,…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06277 · Published 2011-06-14 · Fixed
Priority MEDIUM 52
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote attackers to affect confidentiality,…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06277 · Published 2011-06-14 · Fixed
Priority MEDIUM 49
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03648 · Published 2011-06-14 · Fixed
Priority LOW 28
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03061 · Published 2011-06-14 · Fixed
Priority LOW 22
The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an infinite loop) via a crafted attribute length field in a class file, related to va…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.01763 · Published 2011-09-02 · Fixed CWE-20
Priority LOW 20
The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of service (JVM segmentati…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.01781 · Published 2011-09-02 · Fixed CWE-119
Priority LOW 18
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02612 · Published 2011-06-14 · Fixed
THREATIST.IORead the docs