Red Hat Security AdvisoryRHSA-2013:0156
java-1.7.0-oracle security update
Released 2013-01-14 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.0-oracle-1:1.7.0.11-1jpp.3.el6_3, java-1.7.0-oracle-devel-1:1.7.0.11-1jpp.3.el6_3, java-1.7.0-oracle-javafx-1:1.7.0.11-1jpp.3.el6_3 +3
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.0-oracle-1:1.7.0.11-1jpp.3.el6_3, java-1.7.0-oracle-devel-1:1.7.0.11-1jpp.3.el6_3, java-1.7.0-oracle-javafx-1:1.7.0.11-1jpp.3.el6_3 +1
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.7.0-oracle-1:1.7.0.11-1jpp.3.el5_9, java-1.7.0-oracle-1:1.7.0.11-1jpp.3.el5_9.i386, java-1.7.0-oracle-devel-1:1.7.0.11-1jpp.3.el5_9 +9
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.0-oracle-1:1.7.0.11-1jpp.3.el6_3, java-1.7.0-oracle-devel-1:1.7.0.11-1jpp.3.el6_3, java-1.7.0-oracle-javafx-1:1.7.0.11-1jpp.3.el6_3 +3
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.0-oracle-1:1.7.0.11-1jpp.3.el6_3, java-1.7.0-oracle-devel-1:1.7.0.11-1jpp.3.el6_3, java-1.7.0-oracle-javafx-1:1.7.0.11-1jpp.3.el6_3 +3
Fixes 2 records
Priority CRITICAL 100KEV
Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a priva…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.9708 · Published 2013-01-10 · Fixed CWE-284
Priority MEDIUM 50
Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0422.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04577 · Published 2013-01-14 · Fixed CWE-264
