Red Hat Security AdvisoryRHSA-2017:3047
java-1.6.0-sun security update
Released 2017-10-24 · Red Hat rating Important · View on Red Hat →
Fixes 18 records
Priority MEDIUM 59
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0755 · Published 2017-05-23 · Fixed
Priority MEDIUM 51
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05766 · Published 2017-05-23 · Fixed
Priority MEDIUM 49
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI).
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.03143 · Published 2017-10-19 · Partial fix
Priority MEDIUM 48
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot).
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.02962 · Published 2017-10-19 · Partial fix
Priority MEDIUM 48
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.05204 · Published 2017-05-23 · Fixed CWE-1335
Priority MEDIUM 48
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04875 · Published 2017-05-23 · Fixed
Priority MEDIUM 47
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.16181 · Published 2017-10-19 · Partial fix
Priority MEDIUM 41
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.03206 · Published 2017-10-19 · Partial fix
Priority LOW 37
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO).
CVSS 3.1MEDIUM 6.8· Network · No auth · User interaction · EPSS 0.02635 · Published 2017-10-19 · Fixed
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03114 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 30
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc).
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01489 · Published 2017-10-19 · Fixed
Priority LOW 29
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security).
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00754 · Published 2017-10-19 · Partial fix
Priority LOW 23
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).
CVSS 3.1MEDIUM 4.0· Network · No auth · No interaction · EPSS 0.02199 · Published 2017-10-19 · Partial fix
Priority LOW 20
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.02442 · Published 2017-10-19 · Partial fix
THREATIST.IORead the docs