Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Partial Red Hat: 19 fixed, 1 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.
Summary
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 19
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:oracle:jdk:1.6.0:update181:*:*:*:*:*:* | 1.6.0 update181 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jdk:1.7.0:update161:*:*:*:*:*:* | 1.7.0 update161 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jdk:1.8.0:update152:*:*:*:*:*:* | 1.8.0 update152 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.6.0:update181:*:*:*:*:*:* | 1.6.0 update181 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.7.0:update161:*:*:*:*:*:* | 1.7.0 update161 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.8.0:update152:*:*:*:*:*:* | 1.8.0 update152 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jrockit:r28.3.17:*:*:*:*:*:*:* | r28.3.17 | Vulnerable | Oracle |
| cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:* | 5.6 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:* | 5.7 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:* | 5.8 | Vulnerable | Red Hat |
- cpe:2.3:a:oracle:jdk:1.6.0:update181:*:*:*:*:*:* Versions 1.6.0 update181 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jdk:1.7.0:update161:*:*:*:*:*:* Versions 1.7.0 update161 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jdk:1.8.0:update152:*:*:*:*:*:* Versions 1.8.0 update152 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.6.0:update181:*:*:*:*:*:* Versions 1.6.0 update181 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.7.0:update161:*:*:*:*:*:* Versions 1.7.0 update161 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.8.0:update152:*:*:*:*:*:* Versions 1.8.0 update152 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jrockit:r28.3.17:*:*:*:*:*:*:* Versions r28.3.17 Vulnerable ·Oracle
- cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:* Versions 5.6 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:* Versions 5.7 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:* Versions 5.8 Vulnerable ·Red Hat
Show 9 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* | 16.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* | 17.10 | Vulnerable | Canonical |
| cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:* | all versions | Vulnerable | Hewlett Packard Enterprise |
- cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* Versions 16.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* Versions 17.10 Vulnerable ·Canonical
- cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:* Versions all versions Vulnerable ·Hewlett Packard Enterprise
Remediation
Red Hat 10 advisories
- RHSA-2018:1975 Released 2018-06-25 · Red Hat rating Moderatejava-1.8.0-ibm security update
- Red Hat Satellite 5.8 (RHEL v.6) java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6, java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6
- RHSA-2018:1974 Released 2018-06-25 · Red Hat rating Moderatejava-1.7.1-ibm security update
- Red Hat Satellite 5.6 (RHEL v.6) java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6, java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6
- Red Hat Satellite 5.7 (RHEL v.6) java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6, java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6
- RHSA-2018:1724 Released 2018-05-24 · Red Hat rating Importantjava-1.7.1-ibm security update
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9, java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9, java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9 +3
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9, java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9, java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9 +1
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9, java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9, java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9 +3
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9, java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9, java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9 +3
Show 7 more Red Hat advisories
- RHSA-2018:1723 Released 2018-05-24 · Red Hat rating Importantjava-1.7.1-ibm security update
- Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7, java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7, java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7 +3
- Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7, java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7, java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7 +1
- Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7, java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7, java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7 +3
- Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7, java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7, java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7 +3
- RHSA-2018:1722 Released 2018-05-24 · Red Hat rating Importantjava-1.8.0-ibm security update
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9, java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9, java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9 +3
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9, java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9, java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9 +1
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9, java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9, java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9 +3
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9, java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9, java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9 +3
- RHSA-2018:1721 Released 2018-05-24 · Red Hat rating Importantjava-1.8.0-ibm security update
- Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7, java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7, java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7 +3
- Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7, java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7, java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7 +1
- Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7, java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7, java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7 +3
- Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7, java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7, java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7 +3
- RHSA-2018:1205 Released 2018-04-23 · Red Hat rating Importantjava-1.6.0-sun security update
- Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7 +3
- Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7 +3
- Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7 +3
- Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7 +3
- RHSA-2018:1203 Released 2018-04-23 · Red Hat rating Importantjava-1.6.0-sun security update
- Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6, java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6, java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6 +3
- Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6, java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6, java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6 +3
- Oracle Java for Red Hat Enterprise Linux Server 6 java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6, java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6, java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6 +3
- Oracle Java for Red Hat Enterprise Linux Workstation 6 java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6, java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6, java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6 +3
- RHSA-2018:0100 Released 2018-01-18 · Red Hat rating Importantjava-1.7.0-oracle security update
- Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7, java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7, java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7 +3
- Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7, java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7, java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7 +1
- Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9, java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9, java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9 +3
- Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9, java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9, java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9 +3
- Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7, java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7, java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7 +3
- Oracle Java for Red Hat Enterprise Linux Server 6 java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9, java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9, java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9 +3
- Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7, java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7, java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7 +3
- Oracle Java for Red Hat Enterprise Linux Workstation 6 java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9, java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9, java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9 +3
- RHSA-2018:0099 Released 2018-01-18 · Red Hat rating Criticaljava-1.8.0-oracle security update
- Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7, java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7, java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7 +3
- Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7, java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7, java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7 +1
- Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9, java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9, java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9 +3
- Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9, java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9, java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9 +3
- Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7, java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7, java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7 +3
- Oracle Java for Red Hat Enterprise Linux Server 6 java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9, java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9, java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9 +3
- Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7, java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7, java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7 +3
- Oracle Java for Red Hat Enterprise Linux Workstation 6 java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9, java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9, java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9 +3
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Will not fix |
| Oracle Java for Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2018:0099, RHSA-2018:0100, RHSA-2018:1205 |
| Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) | Fixed | RHSA-2018:0099, RHSA-2018:0100, RHSA-2018:1205 |
| Oracle Java for Red Hat Enterprise Linux Desktop 6 | Fixed | RHSA-2018:0099, RHSA-2018:0100, RHSA-2018:1203 |
| Oracle Java for Red Hat Enterprise Linux HPC Node 6 | Fixed | RHSA-2018:0099, RHSA-2018:0100, RHSA-2018:1203 |
| Oracle Java for Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2018:0099, RHSA-2018:0100, RHSA-2018:1205 |
| Oracle Java for Red Hat Enterprise Linux Server 6 | Fixed | RHSA-2018:0099, RHSA-2018:0100, RHSA-2018:1203 |
| Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2018:0099, RHSA-2018:0100, RHSA-2018:1205 |
| Oracle Java for Red Hat Enterprise Linux Workstation 6 | Fixed | RHSA-2018:0099, RHSA-2018:0100, RHSA-2018:1203 |
| Red Hat Enterprise Linux Client Supplementary (v. 7) | Fixed | RHSA-2018:1721, RHSA-2018:1723 |
| Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) | Fixed | RHSA-2018:1721, RHSA-2018:1723 |
| Red Hat Enterprise Linux Desktop Supplementary (v. 6) | Fixed | RHSA-2018:1722, RHSA-2018:1724 |
| Red Hat Enterprise Linux HPC Node Supplementary (v. 6) | Fixed | RHSA-2018:1722, RHSA-2018:1724 |
| Red Hat Enterprise Linux Server Supplementary (v. 6) | Fixed | RHSA-2018:1722, RHSA-2018:1724 |
| Red Hat Enterprise Linux Server Supplementary (v. 7) | Fixed | RHSA-2018:1721, RHSA-2018:1723 |
| Red Hat Enterprise Linux Workstation Supplementary (v. 6) | Fixed | RHSA-2018:1722, RHSA-2018:1724 |
| Red Hat Enterprise Linux Workstation Supplementary (v. 7) | Fixed | RHSA-2018:1721, RHSA-2018:1723 |
| Red Hat Satellite 5.6 (RHEL v.6) | Fixed | RHSA-2018:1974 |
| Red Hat Satellite 5.7 (RHEL v.6) | Fixed | RHSA-2018:1974 |
| Red Hat Satellite 5.8 (RHEL v.6) | Fixed | RHSA-2018:1975 |
Timeline
- 2026-10-02 Threatist record created from CVE-2018-2783
- 2026-10-03 Alias added: GHSA-36xm-wx7c-g2hq
References
Advisory 13
- RHSA-2018:1975
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03857en_us
- RHSA-2018:1724
- RHSA-2018:1203
- USN-3644-1
- RHSA-2018:1723
- https://security.netapp.com/advisory/ntap-20180419-0001/
- https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
- RHSA-2018:1722
- RHSA-2018:1974
- RHSA-2018:1205
- RHSA-2018:1721
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03915en_us
Sources
- CVE-2018-2783 · CVE Program
- CVE-2018-2783 · NVD
- FIRST EPSS
- GHSA-36xm-wx7c-g2hq · GitHub Advisory Database · CC BY 4.0
- CVE-2018-2783 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences