RHSA-2013:0247: java-1.7.0-openjdk security update

TI-2013-00358 CVE-2013-0431 · GHSA-h3cw-j9j9-5pc4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

HIGH 75KEV

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified ve…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.9015 Published 2013-01-31 Partial fix CWE-693

TI-2013-00372 CVE-2013-0445 · GHSA-j3c4-gfqw-3f6c

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect conf…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08087 Published 2013-02-02 Partial fix

TI-2013-00369 CVE-2013-0442 · GHSA-4pxg-g9pw-92x7

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08087 Published 2013-02-02 Partial fix

TI-2013-00368 CVE-2013-0441 · GHSA-5f7g-c4h7-7vv4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08087 Published 2013-02-02 Partial fix

TI-2013-00353 CVE-2013-0426 · GHSA-2c2g-g7mc-jv23

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08087 Published 2013-02-02 Partial fix

TI-2013-00352 CVE-2013-0425 · GHSA-58g3-37cc-r74w

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08087 Published 2013-02-02 Partial fix

TI-2013-01287 CVE-2013-1480 · GHSA-mqpc-4cpm-7g8c

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07714 Published 2013-02-02 Partial fix

TI-2013-01285 CVE-2013-1478 · GHSA-84c5-rhrc-rq9v

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07634 Published 2013-02-02 Partial fix

TI-2013-01283 CVE-2013-1476 · GHSA-grxh-3mrm-g362

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07634 Published 2013-02-02 Partial fix

TI-2013-01282 CVE-2013-1475 · GHSA-6r72-525q-8rvj

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07634 Published 2013-02-02 Fixed

TI-2013-00377 CVE-2013-0450 · GHSA-q6fw-3p2m-2c6h

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect conf…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07634 Published 2013-02-02 Partial fix

TI-2013-00355 CVE-2013-0428 · GHSA-r97x-9xgg-cf5w

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07634 Published 2013-02-02 Partial fix

TI-2013-00371 CVE-2013-0444 · GHSA-px4h-jjhx-vcmc

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 43

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown v…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.06422 Published 2013-02-02 Partial fix

TI-2013-00356 CVE-2013-0429 · GHSA-pr3m-j4vm-4x8c

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 43

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect conf…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.06697 Published 2013-02-02 Partial fix

TI-2013-00359 CVE-2013-0432 · GHSA-qrmf-26m7-r8fr

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 36

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.04875 Published 2013-02-02 Partial fix

TI-2013-00367 CVE-2013-0440 · GHSA-f73w-73w8-h7j9

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attacker…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05532 Published 2013-02-02 Partial fix

TI-2013-00362 CVE-2013-0435 · GHSA-hv74-3r93-2vw8

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05205 Published 2013-02-02 Partial fix

TI-2013-00361 CVE-2013-0434 · GHSA-xh2v-r28j-h338

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04911 Published 2013-02-02 Partial fix

TI-2013-00360 CVE-2013-0433 · GHSA-rpgf-fvq5-9r6x

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect inte…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04875 Published 2013-02-02 Partial fix

TI-2013-00354 CVE-2013-0427 · GHSA-8m7x-fvvq-rprj

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect inte…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04875 Published 2013-02-02 Partial fix

TI-2013-00351 CVE-2013-0424 · GHSA-3w77-j752-v9mg

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attacker…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04795 Published 2013-02-02 Partial fix

TI-2013-00370 CVE-2013-0443 · GHSA-4p7m-gv97-7rq5

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 26

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.04259 Published 2013-02-02 Partial fix

RHSA-2013:0247

Fixed in

Fixes 22 records

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…