Red Hat Security AdvisoryRHSA-2017:3453
java-1.8.0-ibm security update
Released 2017-12-13 · Red Hat rating Important · View on Red Hat →
Fixes 42 records
Priority MEDIUM 59
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0755 · Published 2017-05-23 · Fixed
Priority MEDIUM 51
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05766 · Published 2017-05-23 · Fixed
Priority MEDIUM 49
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI).
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.03143 · Published 2017-10-19 · Partial fix
Priority MEDIUM 48
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot).
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.02962 · Published 2017-10-19 · Partial fix
Priority MEDIUM 48
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI).
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.02555 · Published 2017-08-08 · Fixed
Priority MEDIUM 48
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP).
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.02555 · Published 2017-08-08 · Fixed
Priority MEDIUM 48
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP).
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.02555 · Published 2017-08-08 · Fixed
Priority MEDIUM 48
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.02555 · Published 2017-08-08 · Fixed
Priority MEDIUM 48
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.02555 · Published 2017-08-08 · Fixed
Priority MEDIUM 48
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.05204 · Published 2017-05-23 · Fixed CWE-1335
Priority MEDIUM 48
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04875 · Published 2017-05-23 · Fixed
Priority MEDIUM 47
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.16181 · Published 2017-10-19 · Partial fix
Priority MEDIUM 47
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT).
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.02415 · Published 2017-08-08 · Fixed
Priority MEDIUM 47
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO).
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.02415 · Published 2017-08-08 · Fixed
Priority MEDIUM 46
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI).
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.02971 · Published 2017-08-08 · Fixed
Priority MEDIUM 44
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security).
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.03386 · Published 2017-08-08 · Fixed
Priority MEDIUM 44
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02737 · Published 2017-08-08 · Fixed
Priority MEDIUM 43
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment).
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.08794 · Published 2017-10-19 · Fixed
Priority MEDIUM 42
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting).
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.02402 · Published 2017-08-08 · Fixed
Priority MEDIUM 42
IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data.
CVSS 3.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.03632 · Published 2017-05-22 · Fixed CWE-611
Priority MEDIUM 41
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.03206 · Published 2017-10-19 · Partial fix
Priority MEDIUM 41
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security).
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.03313 · Published 2017-08-08 · Fixed
Priority MEDIUM 40
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS).
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.02862 · Published 2017-08-08 · Fixed
Priority LOW 37
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE).
CVSS 3.0HIGH 7.7· Local · No auth · User interaction · EPSS 0.0079 · Published 2017-04-24 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03114 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03305 · Published 2017-10-19 · Partial fix
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03114 · Published 2017-08-08 · Fixed
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03114 · Published 2017-08-08 · Fixed
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0345 · Published 2017-08-08 · Fixed
Priority LOW 36
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bo…
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.02762 · Published 2017-02-03 · Partial fix CWE-125
Priority LOW 29
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security).
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00754 · Published 2017-10-19 · Partial fix
Priority LOW 24
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment).
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.01913 · Published 2017-08-08 · Fixed
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking).
CVSS 3.0MEDIUM 4.2· Network · No auth · User interaction · EPSS 0.02493 · Published 2017-04-24 · Partial fix
Priority LOW 23
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).
CVSS 3.1MEDIUM 4.0· Network · No auth · No interaction · EPSS 0.02199 · Published 2017-10-19 · Partial fix
Priority LOW 23
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).
CVSS 3.0LOW 3.7· Network · No auth · No interaction · EPSS 0.02991 · Published 2017-04-24 · Partial fix
Priority LOW 22
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).
CVSS 3.0LOW 3.7· Network · No auth · No interaction · EPSS 0.0198 · Published 2017-04-24 · Partial fix
Priority LOW 20
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.02442 · Published 2017-10-19 · Partial fix
Priority LOW 19
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security).
CVSS 3.0LOW 3.1· Network · No auth · User interaction · EPSS 0.01993 · Published 2017-04-24 · Partial fix
THREATIST.IORead the docs