Read the docs
TI-2017-07727 Aliases CVE-2017-10388GHSA-8j2p-7p84-f2f5

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

Priority MEDIUM 41Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 36 fixed, 1 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: Applies to the Java SE Kerberos client. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.03206 88th percentileScored 2026-11-07
Fix Partial Red Hat: 9 advisoriesRed Hat: 36 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
OracleJavaJava SE: 6u161; 7u151; 8u144; 9; Java SE Embedded: 8u144—No fix listedCNA
  • Java VendorOracle Affected Java SE: 6u161; 7u151; 8u144; 9; Java SE Embedded: 8u144 Fixed in — No fix listed CNA

CPE configurations NVD · 54

CPEVersionsRoleVendor
cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*1.6.0 update161VulnerableOracle
cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*1.7.0 update151VulnerableOracle
cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*1.8.0 update144VulnerableOracle
cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:*1.9.0VulnerableOracle
cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*1.6.0 update161VulnerableOracle
cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*1.7.0 update151VulnerableOracle
cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*1.8.0 update144VulnerableOracle
cpe:2.3:a:oracle:jre:1.9.0:*:*:*:*:*:*:*1.9.0VulnerableOracle
cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*5.8VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
  • cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:* Versions 1.6.0 update161 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:* Versions 1.7.0 update151 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:* Versions 1.8.0 update144 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:* Versions 1.9.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:* Versions 1.6.0 update161 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:* Versions 1.7.0 update151 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:* Versions 1.8.0 update144 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jre:1.9.0:*:*:*:*:*:*:* Versions 1.9.0 Vulnerable ·Oracle
  • cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:* Versions 5.8 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
Show 44 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*7.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*7.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*7.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*7.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*7.3VulnerableNetApp
cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*9.5VulnerableNetApp
cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*11.0 – 11.70.1VulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*up to 7.1VulnerableNetApp
cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*up to 7.1VulnerableNetApp
cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*7.2VulnerableNetApp
cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*7.2VulnerableNetApp
cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*7.2VulnerableNetApp
cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*6.0VulnerableNetApp
cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*7.2VulnerableNetApp
cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*6.0VulnerableNetApp
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*7.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*8.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
  • cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:* Versions 7.3 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:* Versions 9.5 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:* Versions 11.0 – 11.70.1 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:* Versions up to 7.1 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:* Versions up to 7.1 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:* Versions 7.2 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:* Versions 7.2 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:* Versions 7.2 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:* Versions 6.0 Vulnerable ·NetApp
  • cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian

Remediation

Red Hat 9 advisories

  • RHSA-2017:3453 Released 2017-12-13 · Red Hat rating Important
    java-1.8.0-ibm security update
    • Red Hat Satellite 5.8 (RHEL v.6) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9
    • Red Hat Satellite 5.8 ELS (RHEL v.6) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9
  • RHSA-2017:3392 Released 2017-12-06 · Red Hat rating Important
    java-1.7.0-openjdk security and bug fix update
    • Red Hat Enterprise Linux Client (v. 7) java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-headless-1:1.7.0.161-2.6.12.0.el7_4
    • Red Hat Enterprise Linux Client Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-demo-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-devel-1:1.7.0.161-2.6.12.0.el7_4 +2
    • Red Hat Enterprise Linux ComputeNode (v. 7) java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-headless-1:1.7.0.161-2.6.12.0.el7_4
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-demo-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-devel-1:1.7.0.161-2.6.12.0.el7_4 +2
    • Red Hat Enterprise Linux Desktop (v. 6) java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-devel-1:1.7.0.161-2.6.12.0.el6_9
    • Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-javadoc-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-src-1:1.7.0.161-2.6.12.0.el6_9
    • Red Hat Enterprise Linux HPC Node (v. 6) java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-devel-1:1.7.0.161-2.6.12.0.el6_9
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-javadoc-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-src-1:1.7.0.161-2.6.12.0.el6_9
    • Red Hat Enterprise Linux Server (v. 6) java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-devel-1:1.7.0.161-2.6.12.0.el6_9
    • Red Hat Enterprise Linux Server (v. 7) java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-devel-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-headless-1:1.7.0.161-2.6.12.0.el7_4
    • Red Hat Enterprise Linux Server Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-javadoc-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-src-1:1.7.0.161-2.6.12.0.el6_9
    • Red Hat Enterprise Linux Server Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-demo-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-javadoc-1:1.7.0.161-2.6.12.0.el7_4 +1
    • Red Hat Enterprise Linux Workstation (v. 6) java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-devel-1:1.7.0.161-2.6.12.0.el6_9
    • Red Hat Enterprise Linux Workstation (v. 7) java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-devel-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-headless-1:1.7.0.161-2.6.12.0.el7_4
    • Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.7.0-openjdk-demo-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-javadoc-1:1.7.0.161-2.6.12.0.el6_9, java-1.7.0-openjdk-src-1:1.7.0.161-2.6.12.0.el6_9
    • Red Hat Enterprise Linux Workstation Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-demo-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-javadoc-1:1.7.0.161-2.6.12.0.el7_4 +1
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-devel-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-headless-1:1.7.0.161-2.6.12.0.el7_4
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) java-1.7.0-openjdk-accessibility-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-demo-1:1.7.0.161-2.6.12.0.el7_4, java-1.7.0-openjdk-javadoc-1:1.7.0.161-2.6.12.0.el7_4 +1
  • RHSA-2017:3268 Released 2017-11-28 · Red Hat rating Critical
    java-1.7.1-ibm security update
    • Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.2.el7 +3
    • Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.2.el7 +1
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.3.el6_9 +3
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.3.el6_9 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.3.el6_9 +3
    • Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7.ppc, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.2.el7 +6
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.3.el6_9, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.3.el6_9 +3
    • Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-demo-1:1.7.1.4.15-1jpp.2.el7, java-1.7.1-ibm-devel-1:1.7.1.4.15-1jpp.2.el7 +3
Show 6 more Red Hat advisories
  • RHSA-2017:3267 Released 2017-11-28 · Red Hat rating Critical
    java-1.8.0-ibm security update
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-demo-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9 +3
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-demo-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-demo-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9 +3
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-demo-1:1.8.0.5.5-1jpp.1.el6_9, java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.1.el6_9 +3
  • RHSA-2017:3264 Released 2017-11-27 · Red Hat rating Critical
    java-1.8.0-ibm security update
    • Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7, java-1.8.0-ibm-demo-1:1.8.0.5.5-1jpp.2.el7, java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.2.el7 +3
    • Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7, java-1.8.0-ibm-demo-1:1.8.0.5.5-1jpp.2.el7, java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.2.el7 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7, java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7.ppc, java-1.8.0-ibm-demo-1:1.8.0.5.5-1jpp.2.el7 +5
    • Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7, java-1.8.0-ibm-demo-1:1.8.0.5.5-1jpp.2.el7, java-1.8.0-ibm-devel-1:1.8.0.5.5-1jpp.2.el7 +3
  • RHSA-2017:3046 Released 2017-10-24 · Red Hat rating Important
    java-1.7.0-oracle security update
    • Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7, java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7, java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7, java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7, java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7 +1
    • Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6, java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6, java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6 +3
    • Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6, java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6, java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6 +3
    • Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7, java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7, java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Server 6 java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6, java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6, java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7, java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.4.el7, java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.4.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation 6 java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6, java-1.7.0-oracle-devel-1:1.7.0.161-1jpp.3.el6, java-1.7.0-oracle-javafx-1:1.7.0.161-1jpp.3.el6 +3
  • RHSA-2017:3047 Released 2017-10-24 · Red Hat rating Important
    java-1.6.0-sun security update
    • Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7, java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7, java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7, java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7, java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6, java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6, java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6 +3
    • Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6, java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6, java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6 +3
    • Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7, java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7, java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Server 6 java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6, java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6, java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7, java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el7, java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation 6 java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6, java-1.6.0-sun-demo-1:1.6.0.171-1jpp.4.el6, java-1.6.0-sun-devel-1:1.6.0.171-1jpp.4.el6 +3
  • RHSA-2017:2999 Released 2017-10-23 · Red Hat rating Critical
    java-1.8.0-oracle security update
    • Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7, java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7, java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7, java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7, java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7 +1
    • Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6, java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6, java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6 +3
    • Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6, java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6, java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6 +3
    • Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7, java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7, java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Server 6 java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6, java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6, java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7, java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.5.el7, java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.5.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation 6 java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6, java-1.8.0-oracle-devel-1:1.8.0.151-1jpp.1.el6, java-1.8.0-oracle-javafx-1:1.8.0.151-1jpp.1.el6 +3
  • RHSA-2017:2998 Released 2017-10-20 · Red Hat rating Critical
    java-1.8.0-openjdk security update
    • Red Hat Enterprise Linux Client (v. 7) java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-headless-1:1.8.0.151-1.b12.el7_4
    • Red Hat Enterprise Linux Client Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-debug-1:1.8.0.151-1.b12.el7_4 +11
    • Red Hat Enterprise Linux ComputeNode (v. 7) java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-headless-1:1.8.0.151-1.b12.el7_4
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-debug-1:1.8.0.151-1.b12.el7_4 +11
    • Red Hat Enterprise Linux Desktop (v. 6) java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-headless-1:1.8.0.151-1.b12.el6_9
    • Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-demo-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-demo-debug-1:1.8.0.151-1.b12.el6_9 +7
    • Red Hat Enterprise Linux HPC Node (v. 6) java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-devel-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-headless-1:1.8.0.151-1.b12.el6_9
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-demo-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-demo-debug-1:1.8.0.151-1.b12.el6_9 +6
    • Red Hat Enterprise Linux Server (v. 6) java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-devel-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-headless-1:1.8.0.151-1.b12.el6_9
    • Red Hat Enterprise Linux Server (v. 7) java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-devel-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-headless-1:1.8.0.151-1.b12.el7_4
    • Red Hat Enterprise Linux Server Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-demo-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-demo-debug-1:1.8.0.151-1.b12.el6_9 +6
    • Red Hat Enterprise Linux Server Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-debug-1:1.8.0.151-1.b12.el7_4 +10
    • Red Hat Enterprise Linux Workstation (v. 6) java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-devel-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-headless-1:1.8.0.151-1.b12.el6_9
    • Red Hat Enterprise Linux Workstation (v. 7) java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-devel-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-headless-1:1.8.0.151-1.b12.el7_4
    • Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.8.0-openjdk-debug-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-demo-1:1.8.0.151-1.b12.el6_9, java-1.8.0-openjdk-demo-debug-1:1.8.0.151-1.b12.el6_9 +6
    • Red Hat Enterprise Linux Workstation Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-accessibility-debug-1:1.8.0.151-1.b12.el7_4, java-1.8.0-openjdk-debug-1:1.8.0.151-1.b12.el7_4 +10

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Oracle Java — GLSA-201710-31

    16 records Highest priority Priority MEDIUM 5 MEDIUM, 11 LOW

    Other records, highest priority first

    • TI-2017-07636 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…Priority MEDIUM 49
    • TI-2017-07689 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…Priority MEDIUM 48
    • TI-2017-07698 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…Priority MEDIUM 47
    Show all 16 records → Advisory →
  • Advisory ·

    Oracle Java — RHSA-2017:2998

    14 records Highest priority Priority MEDIUM 4 MEDIUM, 10 LOW

    Other records, highest priority first

    • TI-2017-07636 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…Priority MEDIUM 49
    • TI-2017-07689 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…Priority MEDIUM 48
    • TI-2017-07698 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…Priority MEDIUM 47
    Show all 14 records → Advisory →
Show 3 more groups
  • Advisory ·

    Oracle Java — GLSA-201711-14

    14 records Highest priority Priority MEDIUM 4 MEDIUM, 10 LOW

    Other records, highest priority first

    • TI-2017-07636 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…Priority MEDIUM 49
    • TI-2017-07689 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…Priority MEDIUM 48
    • TI-2017-07698 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…Priority MEDIUM 47
    Show all 14 records → Advisory →
  • Advisory ·

    Oracle Java — DSA-4015

    14 records Highest priority Priority MEDIUM 4 MEDIUM, 10 LOW

    Other records, highest priority first

    • TI-2017-07636 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…Priority MEDIUM 49
    • TI-2017-07689 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…Priority MEDIUM 48
    • TI-2017-07698 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…Priority MEDIUM 47
    Show all 14 records → Advisory →
  • Advisory ·

    Oracle Java — DSA-4048

    14 records Highest priority Priority MEDIUM 4 MEDIUM, 10 LOW

    Other records, highest priority first

    • TI-2017-07636 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…Priority MEDIUM 49
    • TI-2017-07689 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…Priority MEDIUM 48
    • TI-2017-07698 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…Priority MEDIUM 47
    Show all 14 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix
Oracle Java for Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2017:2999, RHSA-2017:3046, RHSA-2017:3047
Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)Fixed RHSA-2017:2999, RHSA-2017:3046, RHSA-2017:3047
Oracle Java for Red Hat Enterprise Linux Desktop 6Fixed RHSA-2017:2999, RHSA-2017:3046, RHSA-2017:3047
Oracle Java for Red Hat Enterprise Linux HPC Node 6Fixed RHSA-2017:2999, RHSA-2017:3046, RHSA-2017:3047
Oracle Java for Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2017:2999, RHSA-2017:3046, RHSA-2017:3047
Oracle Java for Red Hat Enterprise Linux Server 6Fixed RHSA-2017:2999, RHSA-2017:3046, RHSA-2017:3047
Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2017:2999, RHSA-2017:3046, RHSA-2017:3047
Oracle Java for Red Hat Enterprise Linux Workstation 6Fixed RHSA-2017:2999, RHSA-2017:3046, RHSA-2017:3047
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2017:2998, RHSA-2017:3392
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2017:2998, RHSA-2017:3392
Red Hat Enterprise Linux Client Supplementary (v. 7)Fixed RHSA-2017:3264, RHSA-2017:3268
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2017:2998, RHSA-2017:3392
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2017:2998, RHSA-2017:3392
Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)Fixed RHSA-2017:3264, RHSA-2017:3268
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2017:2998, RHSA-2017:3392
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2017:2998, RHSA-2017:3392
Red Hat Enterprise Linux Desktop Supplementary (v. 6)Fixed RHSA-2017:3267, RHSA-2017:3268
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2017:2998, RHSA-2017:3392
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2017:2998, RHSA-2017:3392
Red Hat Enterprise Linux HPC Node Supplementary (v. 6)Fixed RHSA-2017:3267, RHSA-2017:3268
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2017:2998, RHSA-2017:3392
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2017:2998, RHSA-2017:3392
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2017:2998, RHSA-2017:3392
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2017:2998, RHSA-2017:3392
Red Hat Enterprise Linux Server Supplementary (v. 6)Fixed RHSA-2017:3267, RHSA-2017:3268
Red Hat Enterprise Linux Server Supplementary (v. 7)Fixed RHSA-2017:3264, RHSA-2017:3268
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2017:2998, RHSA-2017:3392
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2017:2998, RHSA-2017:3392
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2017:2998, RHSA-2017:3392
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2017:2998, RHSA-2017:3392
Red Hat Enterprise Linux Workstation Supplementary (v. 6)Fixed RHSA-2017:3267, RHSA-2017:3268
Red Hat Enterprise Linux Workstation Supplementary (v. 7)Fixed RHSA-2017:3264, RHSA-2017:3268
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)Fixed RHSA-2017:3392
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)Fixed RHSA-2017:3392
Red Hat Satellite 5.8 (RHEL v.6)Fixed RHSA-2017:3453
Red Hat Satellite 5.8 ELS (RHEL v.6)Fixed RHSA-2017:3453

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-10388
  2. 2026-10-03 Alias added: GHSA-8j2p-7p84-f2f5

References

Patch 1

Advisory 16

  • TI-2016-02888 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-02278 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded… KEVCVSS 3.1CRITICAL 9.8
  • TI-2013-00349 Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to… KEVCVSS 3.1CRITICAL 9.8
  • TI-2012-03989 Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java… KEVCVSS 3.1CRITICAL 9.8
  • TI-2012-01511 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java… KEVCVSS 3.1CRITICAL 9.8
  • TI-2011-03122 Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK… KEVCVSS 3.1CRITICAL 9.8
See all 804 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences