RHSA-2013:0823: java-1.6.0-ibm security update

TI-2013-01298 CVE-2013-1491 · GHSA-w2h9-vx32-mw67

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6…

MEDIUM 59

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code v…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.16422 Published 2013-03-08 Fixed CWE-94

TI-2013-01344 CVE-2013-1537 · GHSA-j5c6-qxp5-xf36

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 55

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09875 Published 2013-04-17 Fixed

TI-2013-00329 CVE-2013-0401 · GHSA-7fc2-vc87-69w8

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6…

MEDIUM 55

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via v…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10342 Published 2013-03-08 Fixed CWE-94

TI-2013-02131 CVE-2013-2384 · GHSA-4g67-62qq-2rv4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08778 Published 2013-04-17 Partial fix

TI-2013-02130 CVE-2013-2383 · GHSA-68qc-65jp-4m7w

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08778 Published 2013-04-17 Partial fix

TI-2013-01376 CVE-2013-1569 · GHSA-p2w7-2677-hrr8

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08869 Published 2013-04-17 Partial fix

TI-2013-02187 CVE-2013-2440 · GHSA-2252-mwqw-xgwq

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availabili…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07133 Published 2013-04-17 Fixed

TI-2013-02182 CVE-2013-2435 · GHSA-6whc-m4v6-hr38

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availabili…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07133 Published 2013-04-17 Fixed

TI-2013-02179 CVE-2013-2432 · GHSA-pm4f-9p32-rfm4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attacker…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07133 Published 2013-04-17 Fixed

TI-2013-02169 CVE-2013-2422 · GHSA-vjrg-wqv9-qmc7

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, int…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06917 Published 2013-04-17 Fixed

TI-2013-02167 CVE-2013-2420 · GHSA-66wh-qh93-8p42

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06917 Published 2013-04-17 Fixed

TI-2013-01364 CVE-2013-1557 · GHSA-2q6v-6h98-x72r

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06917 Published 2013-04-17 Fixed

TI-2013-02166 CVE-2013-2419 · GHSA-f4px-hx4m-mgqh

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 43

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.2258 Published 2013-04-17 Partial fix

TI-2013-02177 CVE-2013-2430 · GHSA-hh74-34h4-39gj

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 42

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; JavaFX 2.2.7 and earlier; and OpenJDK 6 and 7 a…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.05724 Published 2013-04-17 Fixed

TI-2013-02176 CVE-2013-2429 · GHSA-w263-x24h-qvff

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 42

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.05724 Published 2013-04-17 Fixed

TI-2013-02141 CVE-2013-2394 · GHSA-7569-gw6r-r73h

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 42

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attacker…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.05904 Published 2013-04-17 Fixed

TI-2013-01370 CVE-2013-1563 · GHSA-5wmp-rch3-mgpp

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 41

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.05125 Published 2013-04-17 Fixed

TI-2013-00104 CVE-2013-0169 · GHSA-pg96-42c4-p633

The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL…

LOW 39

The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the proces…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.35584 Published 2013-02-08 Partial fix CWE-310

TI-2013-02164 CVE-2013-2417 · GHSA-h54m-rh5c-c9h8

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05009 Published 2013-04-17 Fixed

TI-2013-02171 CVE-2013-2424 · GHSA-9vfq-2pc2-w68x

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04446 Published 2013-04-17 Fixed

TI-2013-02180 CVE-2013-2433 · GHSA-3fgh-gh6w-973v

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 27

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to D…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03757 Published 2013-04-17 Fixed

TI-2013-01347 CVE-2013-1540 · GHSA-399f-x62x-r9gr

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 27

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to D…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03757 Published 2013-04-17 Fixed

TI-2013-02165 CVE-2013-2418 · GHSA-h22v-jpfj-7qf8

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 22

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows local users to affect confidentiality, integrity, and availability vi…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00463 Published 2013-04-17 Fixed

RHSA-2013:0823

Fixed in

Fixes 23 records

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…