CVE-2017-3289 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot).

CVE-2017-3289

Summary

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts).

References

Vulnerable Configurations

cpe:2.3:a:oracle:jdk:1.7:update_121:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.7:update_121:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8:update_111:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8:update_111:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8:update_112:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8:update_112:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7:update_121:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7:update_121:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8:update_111:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8:update_111:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8:update_112:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8:update_112:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 05-01-2018 - 02:31)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

redhat via4

advisories

bugzilla

id	1414164
title	CVE-2016-8328 Oracle JDK: unspecified vulnerability fixed in 8u121 (Java Mission Control)

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 6 is installed
oval oval:com.redhat.rhba:tst:20111656003

AND

comment java-1.8.0-oracle is earlier than 1:1.8.0.121-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20170175001
comment java-1.8.0-oracle is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20150080002

AND

comment java-1.8.0-oracle-devel is earlier than 1:1.8.0.121-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20170175003
comment java-1.8.0-oracle-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20150080004

AND

comment java-1.8.0-oracle-javafx is earlier than 1:1.8.0.121-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20170175005
comment java-1.8.0-oracle-javafx is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20150080006

AND

comment java-1.8.0-oracle-jdbc is earlier than 1:1.8.0.121-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20170175007
comment java-1.8.0-oracle-jdbc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20150080008

AND

comment java-1.8.0-oracle-plugin is earlier than 1:1.8.0.121-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20170175009
comment java-1.8.0-oracle-plugin is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20150080010

AND

comment java-1.8.0-oracle-src is earlier than 1:1.8.0.121-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20170175011
comment java-1.8.0-oracle-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20150080012

AND

comment Red Hat Enterprise Linux 7 is installed
oval oval:com.redhat.rhba:tst:20150364027

AND

comment java-1.8.0-oracle is earlier than 1:1.8.0.121-1jpp.1.el7_3
oval oval:com.redhat.rhsa:tst:20170175014
comment java-1.8.0-oracle is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20150080002

AND

comment java-1.8.0-oracle-devel is earlier than 1:1.8.0.121-1jpp.1.el7_3
oval oval:com.redhat.rhsa:tst:20170175015
comment java-1.8.0-oracle-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20150080004

AND

comment java-1.8.0-oracle-javafx is earlier than 1:1.8.0.121-1jpp.1.el7_3
oval oval:com.redhat.rhsa:tst:20170175016
comment java-1.8.0-oracle-javafx is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20150080006

AND

comment java-1.8.0-oracle-jdbc is earlier than 1:1.8.0.121-1jpp.1.el7_3
oval oval:com.redhat.rhsa:tst:20170175017
comment java-1.8.0-oracle-jdbc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20150080008

AND

comment java-1.8.0-oracle-plugin is earlier than 1:1.8.0.121-1jpp.1.el7_3
oval oval:com.redhat.rhsa:tst:20170175018
comment java-1.8.0-oracle-plugin is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20150080010

AND

comment java-1.8.0-oracle-src is earlier than 1:1.8.0.121-1jpp.1.el7_3
oval oval:com.redhat.rhsa:tst:20170175019
comment java-1.8.0-oracle-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20150080012

rhsa

id	RHSA-2017:0175
released	2017-01-19
severity	Critical
title	RHSA-2017:0175: java-1.8.0-oracle security update (Critical)

bugzilla

id	1414163
title	CVE-2017-3259 Oracle JDK: unspecified vulnerability fixed in 6u141, 7u131, and 8u121 (Deployment)

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 5 is installed
oval oval:com.redhat.rhba:tst:20070331005

AND

comment java-1.7.0-oracle is earlier than 1:1.7.0.131-1jpp.1.el5_11
oval oval:com.redhat.rhsa:tst:20170176001
comment java-1.7.0-oracle is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140413002

AND

comment java-1.7.0-oracle-devel is earlier than 1:1.7.0.131-1jpp.1.el5_11
oval oval:com.redhat.rhsa:tst:20170176003
comment java-1.7.0-oracle-devel is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140413004

AND

comment java-1.7.0-oracle-javafx is earlier than 1:1.7.0.131-1jpp.1.el5_11
oval oval:com.redhat.rhsa:tst:20170176005
comment java-1.7.0-oracle-javafx is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140413006

AND

comment java-1.7.0-oracle-jdbc is earlier than 1:1.7.0.131-1jpp.1.el5_11
oval oval:com.redhat.rhsa:tst:20170176007
comment java-1.7.0-oracle-jdbc is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140413008

AND

comment java-1.7.0-oracle-plugin is earlier than 1:1.7.0.131-1jpp.1.el5_11
oval oval:com.redhat.rhsa:tst:20170176009
comment java-1.7.0-oracle-plugin is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140413010

AND

comment java-1.7.0-oracle-src is earlier than 1:1.7.0.131-1jpp.1.el5_11
oval oval:com.redhat.rhsa:tst:20170176011
comment java-1.7.0-oracle-src is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140413012

AND

comment Red Hat Enterprise Linux 6 is installed
oval oval:com.redhat.rhba:tst:20111656003

AND

comment java-1.7.0-oracle is earlier than 1:1.7.0.131-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20170176014
comment java-1.7.0-oracle is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413015

AND

comment java-1.7.0-oracle-devel is earlier than 1:1.7.0.131-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20170176016
comment java-1.7.0-oracle-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413017

AND

comment java-1.7.0-oracle-javafx is earlier than 1:1.7.0.131-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20170176018
comment java-1.7.0-oracle-javafx is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413019

AND

comment java-1.7.0-oracle-jdbc is earlier than 1:1.7.0.131-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20170176020
comment java-1.7.0-oracle-jdbc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413021

AND

comment java-1.7.0-oracle-plugin is earlier than 1:1.7.0.131-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20170176022
comment java-1.7.0-oracle-plugin is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413023

AND

comment java-1.7.0-oracle-src is earlier than 1:1.7.0.131-1jpp.1.el6_8
oval oval:com.redhat.rhsa:tst:20170176024
comment java-1.7.0-oracle-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413025

AND

comment Red Hat Enterprise Linux 7 is installed
oval oval:com.redhat.rhba:tst:20150364027

AND

comment java-1.7.0-oracle is earlier than 1:1.7.0.131-1jpp.1.el7_3
oval oval:com.redhat.rhsa:tst:20170176027
comment java-1.7.0-oracle is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413015

AND

comment java-1.7.0-oracle-devel is earlier than 1:1.7.0.131-1jpp.1.el7_3
oval oval:com.redhat.rhsa:tst:20170176028
comment java-1.7.0-oracle-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413017

AND

comment java-1.7.0-oracle-javafx is earlier than 1:1.7.0.131-1jpp.1.el7_3
oval oval:com.redhat.rhsa:tst:20170176029
comment java-1.7.0-oracle-javafx is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413019

AND

comment java-1.7.0-oracle-jdbc is earlier than 1:1.7.0.131-1jpp.1.el7_3
oval oval:com.redhat.rhsa:tst:20170176030
comment java-1.7.0-oracle-jdbc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413021

AND

comment java-1.7.0-oracle-plugin is earlier than 1:1.7.0.131-1jpp.1.el7_3
oval oval:com.redhat.rhsa:tst:20170176031
comment java-1.7.0-oracle-plugin is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413023

AND

comment java-1.7.0-oracle-src is earlier than 1:1.7.0.131-1jpp.1.el7_3
oval oval:com.redhat.rhsa:tst:20170176032
comment java-1.7.0-oracle-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413025

rhsa

id	RHSA-2017:0176
released	2017-01-19
severity	Critical
title	RHSA-2017:0176: java-1.7.0-oracle security update (Critical)

bugzilla

id	1413955
title	CVE-2017-3241 OpenJDK: untrusted input deserialization in RMI registry and DCG (RMI, 8156802)

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 6 is installed
oval oval:com.redhat.rhba:tst:20111656003

AND

comment java-1.8.0-openjdk is earlier than 1:1.8.0.121-0.b13.el6_8
oval oval:com.redhat.rhsa:tst:20170180001
comment java-1.8.0-openjdk is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20141636002

AND

comment java-1.8.0-openjdk-debug is earlier than 1:1.8.0.121-0.b13.el6_8
oval oval:com.redhat.rhsa:tst:20170180003
comment java-1.8.0-openjdk-debug is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20151919004

AND

comment java-1.8.0-openjdk-demo is earlier than 1:1.8.0.121-0.b13.el6_8
oval oval:com.redhat.rhsa:tst:20170180005
comment java-1.8.0-openjdk-demo is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20141636004

AND

comment java-1.8.0-openjdk-demo-debug is earlier than 1:1.8.0.121-0.b13.el6_8
oval oval:com.redhat.rhsa:tst:20170180007
comment java-1.8.0-openjdk-demo-debug is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20151919008

AND

comment java-1.8.0-openjdk-devel is earlier than 1:1.8.0.121-0.b13.el6_8
oval oval:com.redhat.rhsa:tst:20170180009
comment java-1.8.0-openjdk-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20141636006

AND

comment java-1.8.0-openjdk-devel-debug is earlier than 1:1.8.0.121-0.b13.el6_8
oval oval:com.redhat.rhsa:tst:20170180011
comment java-1.8.0-openjdk-devel-debug is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20151919012

AND

comment java-1.8.0-openjdk-headless is earlier than 1:1.8.0.121-0.b13.el6_8
oval oval:com.redhat.rhsa:tst:20170180013
comment java-1.8.0-openjdk-headless is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20141636008

AND

comment java-1.8.0-openjdk-headless-debug is earlier than 1:1.8.0.121-0.b13.el6_8
oval oval:com.redhat.rhsa:tst:20170180015
comment java-1.8.0-openjdk-headless-debug is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20151919016

AND

comment java-1.8.0-openjdk-javadoc is earlier than 1:1.8.0.121-0.b13.el6_8
oval oval:com.redhat.rhsa:tst:20170180017
comment java-1.8.0-openjdk-javadoc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20141636010

AND

comment java-1.8.0-openjdk-javadoc-debug is earlier than 1:1.8.0.121-0.b13.el6_8
oval oval:com.redhat.rhsa:tst:20170180019
comment java-1.8.0-openjdk-javadoc-debug is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20151919020

AND

comment java-1.8.0-openjdk-src is earlier than 1:1.8.0.121-0.b13.el6_8
oval oval:com.redhat.rhsa:tst:20170180021
comment java-1.8.0-openjdk-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20141636012

AND

comment java-1.8.0-openjdk-src-debug is earlier than 1:1.8.0.121-0.b13.el6_8
oval oval:com.redhat.rhsa:tst:20170180023
comment java-1.8.0-openjdk-src-debug is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20151919024

AND

comment Red Hat Enterprise Linux 7 is installed
oval oval:com.redhat.rhba:tst:20150364027

AND

comment java-1.8.0-openjdk is earlier than 1:1.8.0.121-0.b13.el7_3
oval oval:com.redhat.rhsa:tst:20170180026
comment java-1.8.0-openjdk is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20141636002

AND

comment java-1.8.0-openjdk-accessibility is earlier than 1:1.8.0.121-0.b13.el7_3
oval oval:com.redhat.rhsa:tst:20170180027
comment java-1.8.0-openjdk-accessibility is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20150809016

AND

comment java-1.8.0-openjdk-accessibility-debug is earlier than 1:1.8.0.121-0.b13.el7_3
oval oval:com.redhat.rhsa:tst:20170180029
comment java-1.8.0-openjdk-accessibility-debug is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20160049006

AND

comment java-1.8.0-openjdk-debug is earlier than 1:1.8.0.121-0.b13.el7_3
oval oval:com.redhat.rhsa:tst:20170180031
comment java-1.8.0-openjdk-debug is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20151919004

AND

comment java-1.8.0-openjdk-demo is earlier than 1:1.8.0.121-0.b13.el7_3
oval oval:com.redhat.rhsa:tst:20170180032
comment java-1.8.0-openjdk-demo is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20141636004

AND

comment java-1.8.0-openjdk-demo-debug is earlier than 1:1.8.0.121-0.b13.el7_3
oval oval:com.redhat.rhsa:tst:20170180033
comment java-1.8.0-openjdk-demo-debug is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20151919008

AND

comment java-1.8.0-openjdk-devel is earlier than 1:1.8.0.121-0.b13.el7_3
oval oval:com.redhat.rhsa:tst:20170180034
comment java-1.8.0-openjdk-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20141636006

AND

comment java-1.8.0-openjdk-devel-debug is earlier than 1:1.8.0.121-0.b13.el7_3
oval oval:com.redhat.rhsa:tst:20170180035
comment java-1.8.0-openjdk-devel-debug is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20151919012

AND

comment java-1.8.0-openjdk-headless is earlier than 1:1.8.0.121-0.b13.el7_3
oval oval:com.redhat.rhsa:tst:20170180036
comment java-1.8.0-openjdk-headless is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20141636008

AND

comment java-1.8.0-openjdk-headless-debug is earlier than 1:1.8.0.121-0.b13.el7_3
oval oval:com.redhat.rhsa:tst:20170180037
comment java-1.8.0-openjdk-headless-debug is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20151919016

AND

comment java-1.8.0-openjdk-javadoc is earlier than 1:1.8.0.121-0.b13.el7_3
oval oval:com.redhat.rhsa:tst:20170180038
comment java-1.8.0-openjdk-javadoc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20141636010

AND

comment java-1.8.0-openjdk-javadoc-debug is earlier than 1:1.8.0.121-0.b13.el7_3
oval oval:com.redhat.rhsa:tst:20170180039
comment java-1.8.0-openjdk-javadoc-debug is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20151919020

AND

comment java-1.8.0-openjdk-javadoc-zip is earlier than 1:1.8.0.121-0.b13.el7_3
oval oval:com.redhat.rhsa:tst:20170180040
comment java-1.8.0-openjdk-javadoc-zip is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20170180041

AND

comment java-1.8.0-openjdk-javadoc-zip-debug is earlier than 1:1.8.0.121-0.b13.el7_3
oval oval:com.redhat.rhsa:tst:20170180042
comment java-1.8.0-openjdk-javadoc-zip-debug is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20170180043

AND

comment java-1.8.0-openjdk-src is earlier than 1:1.8.0.121-0.b13.el7_3
oval oval:com.redhat.rhsa:tst:20170180044
comment java-1.8.0-openjdk-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20141636012

AND

comment java-1.8.0-openjdk-src-debug is earlier than 1:1.8.0.121-0.b13.el7_3
oval oval:com.redhat.rhsa:tst:20170180045
comment java-1.8.0-openjdk-src-debug is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20151919024

rhsa

id	RHSA-2017:0180
released	2017-01-20
severity	Critical
title	RHSA-2017:0180: java-1.8.0-openjdk security update (Critical)

bugzilla

id	1413955
title	CVE-2017-3241 OpenJDK: untrusted input deserialization in RMI registry and DCG (RMI, 8156802)

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 5 is installed
oval oval:com.redhat.rhba:tst:20070331005

AND

comment java-1.7.0-openjdk is earlier than 1:1.7.0.131-2.6.9.0.el5_11
oval oval:com.redhat.rhsa:tst:20170269001
comment java-1.7.0-openjdk is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20130165013

AND

comment java-1.7.0-openjdk-demo is earlier than 1:1.7.0.131-2.6.9.0.el5_11
oval oval:com.redhat.rhsa:tst:20170269003
comment java-1.7.0-openjdk-demo is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20130165015

AND

comment java-1.7.0-openjdk-devel is earlier than 1:1.7.0.131-2.6.9.0.el5_11
oval oval:com.redhat.rhsa:tst:20170269005
comment java-1.7.0-openjdk-devel is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20130165017

AND

comment java-1.7.0-openjdk-javadoc is earlier than 1:1.7.0.131-2.6.9.0.el5_11
oval oval:com.redhat.rhsa:tst:20170269007
comment java-1.7.0-openjdk-javadoc is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20130165019

AND

comment java-1.7.0-openjdk-src is earlier than 1:1.7.0.131-2.6.9.0.el5_11
oval oval:com.redhat.rhsa:tst:20170269009
comment java-1.7.0-openjdk-src is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20130165021

AND

comment Red Hat Enterprise Linux 6 is installed
oval oval:com.redhat.rhba:tst:20111656003

AND

comment java-1.7.0-openjdk is earlier than 1:1.7.0.131-2.6.9.0.el6_8
oval oval:com.redhat.rhsa:tst:20170269012
comment java-1.7.0-openjdk is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20121009002

AND

comment java-1.7.0-openjdk-demo is earlier than 1:1.7.0.131-2.6.9.0.el6_8
oval oval:com.redhat.rhsa:tst:20170269014
comment java-1.7.0-openjdk-demo is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20121009004

AND

comment java-1.7.0-openjdk-devel is earlier than 1:1.7.0.131-2.6.9.0.el6_8
oval oval:com.redhat.rhsa:tst:20170269016
comment java-1.7.0-openjdk-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20121009006

AND

comment java-1.7.0-openjdk-javadoc is earlier than 1:1.7.0.131-2.6.9.0.el6_8
oval oval:com.redhat.rhsa:tst:20170269018
comment java-1.7.0-openjdk-javadoc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20121009008

AND

comment java-1.7.0-openjdk-src is earlier than 1:1.7.0.131-2.6.9.0.el6_8
oval oval:com.redhat.rhsa:tst:20170269020
comment java-1.7.0-openjdk-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20121009010

AND

comment Red Hat Enterprise Linux 7 is installed
oval oval:com.redhat.rhba:tst:20150364027

AND

comment java-1.7.0-openjdk is earlier than 1:1.7.0.131-2.6.9.0.el7_3
oval oval:com.redhat.rhsa:tst:20170269023
comment java-1.7.0-openjdk is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20121009002

AND

comment java-1.7.0-openjdk-accessibility is earlier than 1:1.7.0.131-2.6.9.0.el7_3
oval oval:com.redhat.rhsa:tst:20170269024
comment java-1.7.0-openjdk-accessibility is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140675004

AND

comment java-1.7.0-openjdk-demo is earlier than 1:1.7.0.131-2.6.9.0.el7_3
oval oval:com.redhat.rhsa:tst:20170269026
comment java-1.7.0-openjdk-demo is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20121009004

AND

comment java-1.7.0-openjdk-devel is earlier than 1:1.7.0.131-2.6.9.0.el7_3
oval oval:com.redhat.rhsa:tst:20170269027
comment java-1.7.0-openjdk-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20121009006

AND

comment java-1.7.0-openjdk-headless is earlier than 1:1.7.0.131-2.6.9.0.el7_3
oval oval:com.redhat.rhsa:tst:20170269028
comment java-1.7.0-openjdk-headless is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140675010

AND

comment java-1.7.0-openjdk-javadoc is earlier than 1:1.7.0.131-2.6.9.0.el7_3
oval oval:com.redhat.rhsa:tst:20170269030
comment java-1.7.0-openjdk-javadoc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20121009008

AND

comment java-1.7.0-openjdk-src is earlier than 1:1.7.0.131-2.6.9.0.el7_3
oval oval:com.redhat.rhsa:tst:20170269031
comment java-1.7.0-openjdk-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20121009010

rhsa

id	RHSA-2017:0269
released	2017-02-13
severity	Critical
title	RHSA-2017:0269: java-1.7.0-openjdk security update (Critical)

rhsa
id RHSA-2017:0263
rhsa
id RHSA-2017:0336
rhsa
id RHSA-2017:0337
rhsa
id RHSA-2017:1216

rpms

java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8
java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3
java-1.8.0-oracle-devel-1:1.8.0.121-1jpp.1.el6_8
java-1.8.0-oracle-devel-1:1.8.0.121-1jpp.1.el7_3
java-1.8.0-oracle-javafx-1:1.8.0.121-1jpp.1.el6_8
java-1.8.0-oracle-javafx-1:1.8.0.121-1jpp.1.el7_3
java-1.8.0-oracle-jdbc-1:1.8.0.121-1jpp.1.el6_8
java-1.8.0-oracle-jdbc-1:1.8.0.121-1jpp.1.el7_3
java-1.8.0-oracle-plugin-1:1.8.0.121-1jpp.1.el6_8
java-1.8.0-oracle-plugin-1:1.8.0.121-1jpp.1.el7_3
java-1.8.0-oracle-src-1:1.8.0.121-1jpp.1.el6_8
java-1.8.0-oracle-src-1:1.8.0.121-1jpp.1.el7_3
java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11
java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8
java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3
java-1.7.0-oracle-devel-1:1.7.0.131-1jpp.1.el5_11
java-1.7.0-oracle-devel-1:1.7.0.131-1jpp.1.el6_8
java-1.7.0-oracle-devel-1:1.7.0.131-1jpp.1.el7_3
java-1.7.0-oracle-javafx-1:1.7.0.131-1jpp.1.el5_11
java-1.7.0-oracle-javafx-1:1.7.0.131-1jpp.1.el6_8
java-1.7.0-oracle-javafx-1:1.7.0.131-1jpp.1.el7_3
java-1.7.0-oracle-jdbc-1:1.7.0.131-1jpp.1.el5_11
java-1.7.0-oracle-jdbc-1:1.7.0.131-1jpp.1.el6_8
java-1.7.0-oracle-jdbc-1:1.7.0.131-1jpp.1.el7_3
java-1.7.0-oracle-plugin-1:1.7.0.131-1jpp.1.el5_11
java-1.7.0-oracle-plugin-1:1.7.0.131-1jpp.1.el6_8
java-1.7.0-oracle-plugin-1:1.7.0.131-1jpp.1.el7_3
java-1.7.0-oracle-src-1:1.7.0.131-1jpp.1.el5_11
java-1.7.0-oracle-src-1:1.7.0.131-1jpp.1.el6_8
java-1.7.0-oracle-src-1:1.7.0.131-1jpp.1.el7_3
java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8
java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3
java-1.8.0-openjdk-accessibility-1:1.8.0.121-0.b13.el7_3
java-1.8.0-openjdk-accessibility-debug-1:1.8.0.121-0.b13.el7_3
java-1.8.0-openjdk-debug-1:1.8.0.121-0.b13.el6_8
java-1.8.0-openjdk-debug-1:1.8.0.121-0.b13.el7_3
java-1.8.0-openjdk-debuginfo-1:1.8.0.121-0.b13.el6_8
java-1.8.0-openjdk-debuginfo-1:1.8.0.121-0.b13.el7_3
java-1.8.0-openjdk-demo-1:1.8.0.121-0.b13.el6_8
java-1.8.0-openjdk-demo-1:1.8.0.121-0.b13.el7_3
java-1.8.0-openjdk-demo-debug-1:1.8.0.121-0.b13.el6_8
java-1.8.0-openjdk-demo-debug-1:1.8.0.121-0.b13.el7_3
java-1.8.0-openjdk-devel-1:1.8.0.121-0.b13.el6_8
java-1.8.0-openjdk-devel-1:1.8.0.121-0.b13.el7_3
java-1.8.0-openjdk-devel-debug-1:1.8.0.121-0.b13.el6_8
java-1.8.0-openjdk-devel-debug-1:1.8.0.121-0.b13.el7_3
java-1.8.0-openjdk-headless-1:1.8.0.121-0.b13.el6_8
java-1.8.0-openjdk-headless-1:1.8.0.121-0.b13.el7_3
java-1.8.0-openjdk-headless-debug-1:1.8.0.121-0.b13.el6_8
java-1.8.0-openjdk-headless-debug-1:1.8.0.121-0.b13.el7_3
java-1.8.0-openjdk-javadoc-1:1.8.0.121-0.b13.el6_8
java-1.8.0-openjdk-javadoc-1:1.8.0.121-0.b13.el7_3
java-1.8.0-openjdk-javadoc-debug-1:1.8.0.121-0.b13.el6_8
java-1.8.0-openjdk-javadoc-debug-1:1.8.0.121-0.b13.el7_3
java-1.8.0-openjdk-javadoc-zip-1:1.8.0.121-0.b13.el7_3
java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.121-0.b13.el7_3
java-1.8.0-openjdk-src-1:1.8.0.121-0.b13.el6_8
java-1.8.0-openjdk-src-1:1.8.0.121-0.b13.el7_3
java-1.8.0-openjdk-src-debug-1:1.8.0.121-0.b13.el6_8
java-1.8.0-openjdk-src-debug-1:1.8.0.121-0.b13.el7_3
java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8
java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7
java-1.8.0-ibm-demo-1:1.8.0.4.0-1jpp.1.el6_8
java-1.8.0-ibm-demo-1:1.8.0.4.0-1jpp.1.el7
java-1.8.0-ibm-devel-1:1.8.0.4.0-1jpp.1.el6_8
java-1.8.0-ibm-devel-1:1.8.0.4.0-1jpp.1.el7
java-1.8.0-ibm-jdbc-1:1.8.0.4.0-1jpp.1.el6_8
java-1.8.0-ibm-jdbc-1:1.8.0.4.0-1jpp.1.el7
java-1.8.0-ibm-plugin-1:1.8.0.4.0-1jpp.1.el6_8
java-1.8.0-ibm-plugin-1:1.8.0.4.0-1jpp.1.el7
java-1.8.0-ibm-src-1:1.8.0.4.0-1jpp.1.el6_8
java-1.8.0-ibm-src-1:1.8.0.4.0-1jpp.1.el7
java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11
java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8
java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3
java-1.7.0-openjdk-accessibility-1:1.7.0.131-2.6.9.0.el7_3
java-1.7.0-openjdk-debuginfo-1:1.7.0.131-2.6.9.0.el5_11
java-1.7.0-openjdk-debuginfo-1:1.7.0.131-2.6.9.0.el6_8
java-1.7.0-openjdk-debuginfo-1:1.7.0.131-2.6.9.0.el7_3
java-1.7.0-openjdk-demo-1:1.7.0.131-2.6.9.0.el5_11
java-1.7.0-openjdk-demo-1:1.7.0.131-2.6.9.0.el6_8
java-1.7.0-openjdk-demo-1:1.7.0.131-2.6.9.0.el7_3
java-1.7.0-openjdk-devel-1:1.7.0.131-2.6.9.0.el5_11
java-1.7.0-openjdk-devel-1:1.7.0.131-2.6.9.0.el6_8
java-1.7.0-openjdk-devel-1:1.7.0.131-2.6.9.0.el7_3
java-1.7.0-openjdk-headless-1:1.7.0.131-2.6.9.0.el7_3
java-1.7.0-openjdk-javadoc-1:1.7.0.131-2.6.9.0.el5_11
java-1.7.0-openjdk-javadoc-1:1.7.0.131-2.6.9.0.el6_8
java-1.7.0-openjdk-javadoc-1:1.7.0.131-2.6.9.0.el7_3
java-1.7.0-openjdk-src-1:1.7.0.131-2.6.9.0.el5_11
java-1.7.0-openjdk-src-1:1.7.0.131-2.6.9.0.el6_8
java-1.7.0-openjdk-src-1:1.7.0.131-2.6.9.0.el7_3
java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8
java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7
java-1.7.1-ibm-demo-1:1.7.1.4.1-1jpp.1.el6_8
java-1.7.1-ibm-demo-1:1.7.1.4.1-1jpp.2.el7
java-1.7.1-ibm-devel-1:1.7.1.4.1-1jpp.1.el6_8
java-1.7.1-ibm-devel-1:1.7.1.4.1-1jpp.2.el7
java-1.7.1-ibm-jdbc-1:1.7.1.4.1-1jpp.1.el6_8
java-1.7.1-ibm-jdbc-1:1.7.1.4.1-1jpp.2.el7
java-1.7.1-ibm-plugin-1:1.7.1.4.1-1jpp.1.el6_8
java-1.7.1-ibm-plugin-1:1.7.1.4.1-1jpp.2.el7
java-1.7.1-ibm-src-1:1.7.1.4.1-1jpp.1.el6_8
java-1.7.1-ibm-src-1:1.7.1.4.1-1jpp.2.el7
java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11
java-1.7.0-ibm-demo-1:1.7.0.10.1-1jpp.1.el5_11
java-1.7.0-ibm-devel-1:1.7.0.10.1-1jpp.1.el5_11
java-1.7.0-ibm-jdbc-1:1.7.0.10.1-1jpp.1.el5_11
java-1.7.0-ibm-plugin-1:1.7.0.10.1-1jpp.1.el5_11
java-1.7.0-ibm-src-1:1.7.0.10.1-1jpp.1.el5_11
java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8
java-1.7.1-ibm-devel-1:1.7.1.4.1-1jpp.1.el6_8

refmap via4

bid	95525
confirm	http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html https://security.netapp.com/advisory/ntap-20170119-0001/
debian	DSA-3782
gentoo	GLSA-201701-65 GLSA-201707-01
sectrack	1037637

Last major update

05-01-2018 - 02:31

Published

27-01-2017 - 22:59

Last modified

05-01-2018 - 02:31