Red Hat Security AdvisoryRHSA-2017:3268
java-1.7.1-ibm security update
Released 2017-11-28 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.2.el7 +3
- Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.2.el7 +1
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.3.el6_9 +3
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.3.el6_9 +1
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.3.el6_9 +3
- Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7.ppc, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.2.el7 +6
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.3.el6_9 +3
- Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.2.el7 +3
Fixes 14 records
Priority MEDIUM 49
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI).
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.03143 · Published 2017-10-19 · Partial fix
Priority MEDIUM 48
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot).
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.02962 · Published 2017-10-19 · Partial fix
Priority MEDIUM 47
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.16181 · Published 2017-10-19 · Partial fix
Priority MEDIUM 41
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.03206 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03114 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bo…
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.02762 · Published 2017-02-03 · Partial fix CWE-125
Priority LOW 29
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security).
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00754 · Published 2017-10-19 · Partial fix
Priority LOW 23
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).
CVSS 3.1MEDIUM 4.0· Network · No auth · No interaction · EPSS 0.02199 · Published 2017-10-19 · Partial fix
Priority LOW 20
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.02442 · Published 2017-10-19 · Partial fix
THREATIST.IORead the docs