Red Hat Security AdvisoryRHSA-2017:3264
java-1.8.0-ibm security update
Released 2017-11-27 · Red Hat rating Critical · View on Red Hat →
Fixes 15 records
Priority MEDIUM 49
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI).
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.03143 · Published 2017-10-19 · Partial fix
Priority MEDIUM 48
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot).
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.02962 · Published 2017-10-19 · Partial fix
Priority MEDIUM 47
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.16181 · Published 2017-10-19 · Partial fix
Priority MEDIUM 43
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment).
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.08794 · Published 2017-10-19 · Fixed
Priority MEDIUM 41
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.03206 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03114 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bo…
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.02762 · Published 2017-02-03 · Partial fix CWE-125
Priority LOW 29
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security).
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00754 · Published 2017-10-19 · Partial fix
Priority LOW 23
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).
CVSS 3.1MEDIUM 4.0· Network · No auth · No interaction · EPSS 0.02199 · Published 2017-10-19 · Partial fix
Priority LOW 20
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.02442 · Published 2017-10-19 · Partial fix
THREATIST.IORead the docs