{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle Java SE version 6u141",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle JRockit version R28.3.13",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Java SE Embedded version 8u121",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Java SE version 8u121",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Java SE version 7u131",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2017-3533",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3533"
    },
    {
      "name": "CVE-2017-3509",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3509"
    },
    {
      "name": "CVE-2017-3526",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3526"
    },
    {
      "name": "CVE-2017-3512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3512"
    },
    {
      "name": "CVE-2017-3539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3539"
    },
    {
      "name": "CVE-2017-3544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3544"
    },
    {
      "name": "CVE-2017-3514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3514"
    },
    {
      "name": "CVE-2017-3511",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3511"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuapr2017-3236618 du 18 avril    2017",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuapr2017verbose-3236619 du 18    avril 2017",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017verbose-3236619.html#JAVA"
    }
  ],
  "reference": "CERTFR-2017-AVI-119",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2017-04-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eOracle Java SE\u003c/span\u003e. Certaines d\u0027entre elles permettent\n\u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance,\nun d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Java SE",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuapr2017verbose-3236619 du 18 avril 2017",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuapr2017-3236618 du 18 avril 2017",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eGoogle Android (Nexus) toutes versions n\u0027int\u00e9grant pas le  correctif de s\u00e9curit\u00e9 du 5 juillet 2017\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2015-9039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9039"
    },
    {
      "name": "CVE-2015-9040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9040"
    },
    {
      "name": "CVE-2015-9036",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9036"
    },
    {
      "name": "CVE-2015-9055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9055"
    },
    {
      "name": "CVE-2017-8268",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8268"
    },
    {
      "name": "CVE-2017-0685",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0685"
    },
    {
      "name": "CVE-2017-0709",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0709"
    },
    {
      "name": "CVE-2017-0694",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0694"
    },
    {
      "name": "CVE-2017-0700",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0700"
    },
    {
      "name": "CVE-2015-9044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9044"
    },
    {
      "name": "CVE-2015-9037",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9037"
    },
    {
      "name": "CVE-2016-10346",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10346"
    },
    {
      "name": "CVE-2017-8271",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8271"
    },
    {
      "name": "CVE-2017-0673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0673"
    },
    {
      "name": "CVE-2017-0689",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0689"
    },
    {
      "name": "CVE-2015-9072",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9072"
    },
    {
      "name": "CVE-2017-0708",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0708"
    },
    {
      "name": "CVE-2017-0682",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0682"
    },
    {
      "name": "CVE-2017-7308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7308"
    },
    {
      "name": "CVE-2016-10344",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10344"
    },
    {
      "name": "CVE-2015-9038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9038"
    },
    {
      "name": "CVE-2015-9067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9067"
    },
    {
      "name": "CVE-2017-0681",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0681"
    },
    {
      "name": "CVE-2015-9068",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9068"
    },
    {
      "name": "CVE-2015-9050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9050"
    },
    {
      "name": "CVE-2014-9411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9411"
    },
    {
      "name": "CVE-2015-9062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9062"
    },
    {
      "name": "CVE-2017-8246",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8246"
    },
    {
      "name": "CVE-2015-9049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9049"
    },
    {
      "name": "CVE-2014-9978",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9978"
    },
    {
      "name": "CVE-2017-8257",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8257"
    },
    {
      "name": "CVE-2015-5707",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5707"
    },
    {
      "name": "CVE-2017-0699",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0699"
    },
    {
      "name": "CVE-2017-0690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0690"
    },
    {
      "name": "CVE-2017-8261",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8261"
    },
    {
      "name": "CVE-2017-0698",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0698"
    },
    {
      "name": "CVE-2017-0668",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0668"
    },
    {
      "name": "CVE-2015-9048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9048"
    },
    {
      "name": "CVE-2017-0693",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0693"
    },
    {
      "name": "CVE-2017-0680",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0680"
    },
    {
      "name": "CVE-2017-0702",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0702"
    },
    {
      "name": "CVE-2017-8255",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8255"
    },
    {
      "name": "CVE-2017-0688",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0688"
    },
    {
      "name": "CVE-2017-5970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-5970"
    },
    {
      "name": "CVE-2017-8260",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8260"
    },
    {
      "name": "CVE-2014-9975",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9975"
    },
    {
      "name": "CVE-2017-0674",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0674"
    },
    {
      "name": "CVE-2017-0704",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0704"
    },
    {
      "name": "CVE-2015-9046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9046"
    },
    {
      "name": "CVE-2017-8256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8256"
    },
    {
      "name": "CVE-2015-9061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9061"
    },
    {
      "name": "CVE-2017-3544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3544"
    },
    {
      "name": "CVE-2016-10347",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10347"
    },
    {
      "name": "CVE-2017-9417",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-9417"
    },
    {
      "name": "CVE-2017-0683",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0683"
    },
    {
      "name": "CVE-2014-9979",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9979"
    },
    {
      "name": "CVE-2017-8265",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8265"
    },
    {
      "name": "CVE-2015-0575",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0575"
    },
    {
      "name": "CVE-2015-9035",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9035"
    },
    {
      "name": "CVE-2014-9974",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9974"
    },
    {
      "name": "CVE-2016-5872",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5872"
    },
    {
      "name": "CVE-2017-0667",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0667"
    },
    {
      "name": "CVE-2016-5863",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5863"
    },
    {
      "name": "CVE-2017-0675",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0675"
    },
    {
      "name": "CVE-2015-9042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9042"
    },
    {
      "name": "CVE-2016-10391",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10391"
    },
    {
      "name": "CVE-2017-0340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0340"
    },
    {
      "name": "CVE-2017-0710",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0710"
    },
    {
      "name": "CVE-2017-8272",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8272"
    },
    {
      "name": "CVE-2014-9968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9968"
    },
    {
      "name": "CVE-2015-9041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9041"
    },
    {
      "name": "CVE-2017-8263",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8263"
    },
    {
      "name": "CVE-2017-0706",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0706"
    },
    {
      "name": "CVE-2015-9070",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9070"
    },
    {
      "name": "CVE-2015-9071",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9071"
    },
    {
      "name": "CVE-2014-9973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9973"
    },
    {
      "name": "CVE-2017-6074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-6074"
    },
    {
      "name": "CVE-2015-8596",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8596"
    },
    {
      "name": "CVE-2014-9980",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9980"
    },
    {
      "name": "CVE-2017-8270",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8270"
    },
    {
      "name": "CVE-2017-8267",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8267"
    },
    {
      "name": "CVE-2017-0676",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0676"
    },
    {
      "name": "CVE-2017-0672",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0672"
    },
    {
      "name": "CVE-2017-8243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8243"
    },
    {
      "name": "CVE-2017-8266",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8266"
    },
    {
      "name": "CVE-2017-0679",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0679"
    },
    {
      "name": "CVE-2017-0697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0697"
    },
    {
      "name": "CVE-2015-8595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8595"
    },
    {
      "name": "CVE-2017-0666",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0666"
    },
    {
      "name": "CVE-2017-8273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8273"
    },
    {
      "name": "CVE-2017-0691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0691"
    },
    {
      "name": "CVE-2015-9051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9051"
    },
    {
      "name": "CVE-2016-10389",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10389"
    },
    {
      "name": "CVE-2015-9054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9054"
    },
    {
      "name": "CVE-2017-0671",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0671"
    },
    {
      "name": "CVE-2016-10383",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10383"
    },
    {
      "name": "CVE-2017-8259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8259"
    },
    {
      "name": "CVE-2015-9043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9043"
    },
    {
      "name": "CVE-2017-0695",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0695"
    },
    {
      "name": "CVE-2017-0696",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0696"
    },
    {
      "name": "CVE-2017-0326",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0326"
    },
    {
      "name": "CVE-2015-9045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9045"
    },
    {
      "name": "CVE-2017-8254",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8254"
    },
    {
      "name": "CVE-2015-9060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9060"
    },
    {
      "name": "CVE-2017-0686",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0686"
    },
    {
      "name": "CVE-2014-9731",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9731"
    },
    {
      "name": "CVE-2015-9052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9052"
    },
    {
      "name": "CVE-2017-0711",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0711"
    },
    {
      "name": "CVE-2016-10388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10388"
    },
    {
      "name": "CVE-2017-0669",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0669"
    },
    {
      "name": "CVE-2017-0684",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0684"
    },
    {
      "name": "CVE-2016-10343",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10343"
    },
    {
      "name": "CVE-2017-0707",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0707"
    },
    {
      "name": "CVE-2017-0701",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0701"
    },
    {
      "name": "CVE-2017-0692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0692"
    },
    {
      "name": "CVE-2017-8253",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8253"
    },
    {
      "name": "CVE-2017-0677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0677"
    },
    {
      "name": "CVE-2014-9977",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9977"
    },
    {
      "name": "CVE-2017-0705",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0705"
    },
    {
      "name": "CVE-2015-9047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9047"
    },
    {
      "name": "CVE-2015-9069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9069"
    },
    {
      "name": "CVE-2015-9053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9053"
    },
    {
      "name": "CVE-2016-2109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-2109"
    },
    {
      "name": "CVE-2015-9073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9073"
    },
    {
      "name": "CVE-2017-8269",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8269"
    },
    {
      "name": "CVE-2017-0540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0540"
    },
    {
      "name": "CVE-2017-8258",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8258"
    },
    {
      "name": "CVE-2015-8592",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8592"
    },
    {
      "name": "CVE-2017-0664",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0664"
    },
    {
      "name": "CVE-2015-9034",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9034"
    },
    {
      "name": "CVE-2017-0665",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0665"
    },
    {
      "name": "CVE-2016-10382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10382"
    },
    {
      "name": "CVE-2017-8264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8264"
    },
    {
      "name": "CVE-2017-8262",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8262"
    },
    {
      "name": "CVE-2017-0670",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0670"
    },
    {
      "name": "CVE-2016-5871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5871"
    },
    {
      "name": "CVE-2017-0678",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0678"
    }
  ],
  "links": [],
  "reference": "CERTFR-2017-AVI-203",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2017-07-06T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eGoogle Android (Nexus)\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service et une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Android (Nexus)",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Android du 05 juillet 2017",
      "url": "https://source.android.com/security/bulletin/2017-07-01"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle Java SE version 6u141",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle JRockit version R28.3.13",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Java SE Embedded version 8u121",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Java SE version 8u121",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Java SE version 7u131",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2017-3533",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3533"
    },
    {
      "name": "CVE-2017-3509",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3509"
    },
    {
      "name": "CVE-2017-3526",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3526"
    },
    {
      "name": "CVE-2017-3512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3512"
    },
    {
      "name": "CVE-2017-3539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3539"
    },
    {
      "name": "CVE-2017-3544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3544"
    },
    {
      "name": "CVE-2017-3514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3514"
    },
    {
      "name": "CVE-2017-3511",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3511"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuapr2017-3236618 du 18 avril    2017",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuapr2017verbose-3236619 du 18    avril 2017",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017verbose-3236619.html#JAVA"
    }
  ],
  "reference": "CERTFR-2017-AVI-119",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2017-04-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eOracle Java SE\u003c/span\u003e. Certaines d\u0027entre elles permettent\n\u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance,\nun d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Java SE",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuapr2017verbose-3236619 du 18 avril 2017",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuapr2017-3236618 du 18 avril 2017",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eGoogle Android (Nexus) toutes versions n\u0027int\u00e9grant pas le  correctif de s\u00e9curit\u00e9 du 5 juillet 2017\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2015-9039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9039"
    },
    {
      "name": "CVE-2015-9040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9040"
    },
    {
      "name": "CVE-2015-9036",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9036"
    },
    {
      "name": "CVE-2015-9055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9055"
    },
    {
      "name": "CVE-2017-8268",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8268"
    },
    {
      "name": "CVE-2017-0685",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0685"
    },
    {
      "name": "CVE-2017-0709",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0709"
    },
    {
      "name": "CVE-2017-0694",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0694"
    },
    {
      "name": "CVE-2017-0700",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0700"
    },
    {
      "name": "CVE-2015-9044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9044"
    },
    {
      "name": "CVE-2015-9037",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9037"
    },
    {
      "name": "CVE-2016-10346",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10346"
    },
    {
      "name": "CVE-2017-8271",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8271"
    },
    {
      "name": "CVE-2017-0673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0673"
    },
    {
      "name": "CVE-2017-0689",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0689"
    },
    {
      "name": "CVE-2015-9072",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9072"
    },
    {
      "name": "CVE-2017-0708",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0708"
    },
    {
      "name": "CVE-2017-0682",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0682"
    },
    {
      "name": "CVE-2017-7308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7308"
    },
    {
      "name": "CVE-2016-10344",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10344"
    },
    {
      "name": "CVE-2015-9038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9038"
    },
    {
      "name": "CVE-2015-9067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9067"
    },
    {
      "name": "CVE-2017-0681",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0681"
    },
    {
      "name": "CVE-2015-9068",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9068"
    },
    {
      "name": "CVE-2015-9050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9050"
    },
    {
      "name": "CVE-2014-9411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9411"
    },
    {
      "name": "CVE-2015-9062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9062"
    },
    {
      "name": "CVE-2017-8246",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8246"
    },
    {
      "name": "CVE-2015-9049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9049"
    },
    {
      "name": "CVE-2014-9978",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9978"
    },
    {
      "name": "CVE-2017-8257",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8257"
    },
    {
      "name": "CVE-2015-5707",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5707"
    },
    {
      "name": "CVE-2017-0699",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0699"
    },
    {
      "name": "CVE-2017-0690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0690"
    },
    {
      "name": "CVE-2017-8261",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8261"
    },
    {
      "name": "CVE-2017-0698",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0698"
    },
    {
      "name": "CVE-2017-0668",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0668"
    },
    {
      "name": "CVE-2015-9048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9048"
    },
    {
      "name": "CVE-2017-0693",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0693"
    },
    {
      "name": "CVE-2017-0680",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0680"
    },
    {
      "name": "CVE-2017-0702",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0702"
    },
    {
      "name": "CVE-2017-8255",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8255"
    },
    {
      "name": "CVE-2017-0688",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0688"
    },
    {
      "name": "CVE-2017-5970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-5970"
    },
    {
      "name": "CVE-2017-8260",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8260"
    },
    {
      "name": "CVE-2014-9975",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9975"
    },
    {
      "name": "CVE-2017-0674",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0674"
    },
    {
      "name": "CVE-2017-0704",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0704"
    },
    {
      "name": "CVE-2015-9046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9046"
    },
    {
      "name": "CVE-2017-8256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8256"
    },
    {
      "name": "CVE-2015-9061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9061"
    },
    {
      "name": "CVE-2017-3544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3544"
    },
    {
      "name": "CVE-2016-10347",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10347"
    },
    {
      "name": "CVE-2017-9417",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-9417"
    },
    {
      "name": "CVE-2017-0683",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0683"
    },
    {
      "name": "CVE-2014-9979",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9979"
    },
    {
      "name": "CVE-2017-8265",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8265"
    },
    {
      "name": "CVE-2015-0575",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0575"
    },
    {
      "name": "CVE-2015-9035",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9035"
    },
    {
      "name": "CVE-2014-9974",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9974"
    },
    {
      "name": "CVE-2016-5872",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5872"
    },
    {
      "name": "CVE-2017-0667",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0667"
    },
    {
      "name": "CVE-2016-5863",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5863"
    },
    {
      "name": "CVE-2017-0675",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0675"
    },
    {
      "name": "CVE-2015-9042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9042"
    },
    {
      "name": "CVE-2016-10391",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10391"
    },
    {
      "name": "CVE-2017-0340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0340"
    },
    {
      "name": "CVE-2017-0710",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0710"
    },
    {
      "name": "CVE-2017-8272",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8272"
    },
    {
      "name": "CVE-2014-9968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9968"
    },
    {
      "name": "CVE-2015-9041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9041"
    },
    {
      "name": "CVE-2017-8263",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8263"
    },
    {
      "name": "CVE-2017-0706",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0706"
    },
    {
      "name": "CVE-2015-9070",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9070"
    },
    {
      "name": "CVE-2015-9071",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9071"
    },
    {
      "name": "CVE-2014-9973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9973"
    },
    {
      "name": "CVE-2017-6074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-6074"
    },
    {
      "name": "CVE-2015-8596",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8596"
    },
    {
      "name": "CVE-2014-9980",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9980"
    },
    {
      "name": "CVE-2017-8270",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8270"
    },
    {
      "name": "CVE-2017-8267",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8267"
    },
    {
      "name": "CVE-2017-0676",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0676"
    },
    {
      "name": "CVE-2017-0672",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0672"
    },
    {
      "name": "CVE-2017-8243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8243"
    },
    {
      "name": "CVE-2017-8266",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8266"
    },
    {
      "name": "CVE-2017-0679",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0679"
    },
    {
      "name": "CVE-2017-0697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0697"
    },
    {
      "name": "CVE-2015-8595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8595"
    },
    {
      "name": "CVE-2017-0666",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0666"
    },
    {
      "name": "CVE-2017-8273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8273"
    },
    {
      "name": "CVE-2017-0691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0691"
    },
    {
      "name": "CVE-2015-9051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9051"
    },
    {
      "name": "CVE-2016-10389",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10389"
    },
    {
      "name": "CVE-2015-9054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9054"
    },
    {
      "name": "CVE-2017-0671",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0671"
    },
    {
      "name": "CVE-2016-10383",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10383"
    },
    {
      "name": "CVE-2017-8259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8259"
    },
    {
      "name": "CVE-2015-9043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9043"
    },
    {
      "name": "CVE-2017-0695",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0695"
    },
    {
      "name": "CVE-2017-0696",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0696"
    },
    {
      "name": "CVE-2017-0326",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0326"
    },
    {
      "name": "CVE-2015-9045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9045"
    },
    {
      "name": "CVE-2017-8254",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8254"
    },
    {
      "name": "CVE-2015-9060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9060"
    },
    {
      "name": "CVE-2017-0686",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0686"
    },
    {
      "name": "CVE-2014-9731",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9731"
    },
    {
      "name": "CVE-2015-9052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9052"
    },
    {
      "name": "CVE-2017-0711",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0711"
    },
    {
      "name": "CVE-2016-10388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10388"
    },
    {
      "name": "CVE-2017-0669",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0669"
    },
    {
      "name": "CVE-2017-0684",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0684"
    },
    {
      "name": "CVE-2016-10343",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10343"
    },
    {
      "name": "CVE-2017-0707",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0707"
    },
    {
      "name": "CVE-2017-0701",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0701"
    },
    {
      "name": "CVE-2017-0692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0692"
    },
    {
      "name": "CVE-2017-8253",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8253"
    },
    {
      "name": "CVE-2017-0677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0677"
    },
    {
      "name": "CVE-2014-9977",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9977"
    },
    {
      "name": "CVE-2017-0705",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0705"
    },
    {
      "name": "CVE-2015-9047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9047"
    },
    {
      "name": "CVE-2015-9069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9069"
    },
    {
      "name": "CVE-2015-9053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9053"
    },
    {
      "name": "CVE-2016-2109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-2109"
    },
    {
      "name": "CVE-2015-9073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9073"
    },
    {
      "name": "CVE-2017-8269",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8269"
    },
    {
      "name": "CVE-2017-0540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0540"
    },
    {
      "name": "CVE-2017-8258",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8258"
    },
    {
      "name": "CVE-2015-8592",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8592"
    },
    {
      "name": "CVE-2017-0664",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0664"
    },
    {
      "name": "CVE-2015-9034",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9034"
    },
    {
      "name": "CVE-2017-0665",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0665"
    },
    {
      "name": "CVE-2016-10382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10382"
    },
    {
      "name": "CVE-2017-8264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8264"
    },
    {
      "name": "CVE-2017-8262",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-8262"
    },
    {
      "name": "CVE-2017-0670",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0670"
    },
    {
      "name": "CVE-2016-5871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-5871"
    },
    {
      "name": "CVE-2017-0678",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-0678"
    }
  ],
  "links": [],
  "reference": "CERTFR-2017-AVI-203",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2017-07-06T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eGoogle Android (Nexus)\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service et une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Android (Nexus)",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Android du 05 juillet 2017",
      "url": "https://source.android.com/security/bulletin/2017-07-01"
    }
  ]
}

{
  "bids": {
    "bid": {
      "bidNumber": "97745"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-3544",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3544"
    }
  },
  "description": "Java SE \u662f\u57fa\u4e8eJDK\u548cJRE\u7684Java\u5e73\u53f0\u6807\u51c6\u7248\u7684\u7b80\u79f0\uff0c\u7528\u4e8e\u5f00\u53d1\u548c\u90e8\u7f72\u684c\u9762\u3001\u670d\u52a1\u5668\u4ee5\u53ca\u5d4c\u5165\u8bbe\u5907\u548c\u5b9e\u65f6\u73af\u5883\u4e2d\u7684Java\u5e94\u7528\u7a0b\u5e8f\u3002\r\n\r\nOracle Java SE: 7u131, 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13\u5728\u5b9e\u73b0\u4e0a\u5b58\u5728\u8fdc\u7a0b\u5b89\u5168\u6f0f\u6d1e\uff0c\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5f71\u54cd\u5e94\u7528\u7684\u5b8c\u6574\u6027\u3002",
  "discovererName": "unknown",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1a\r\nhttp://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-07163",
  "openTime": "2017-05-22",
  "patchDescription": "Java SE \u662f\u57fa\u4e8eJDK\u548cJRE\u7684Java\u5e73\u53f0\u6807\u51c6\u7248\u7684\u7b80\u79f0\uff0c\u7528\u4e8e\u5f00\u53d1\u548c\u90e8\u7f72\u684c\u9762\u3001\u670d\u52a1\u5668\u4ee5\u53ca\u5d4c\u5165\u8bbe\u5907\u548c\u5b9e\u65f6\u73af\u5883\u4e2d\u7684Java\u5e94\u7528\u7a0b\u5e8f\u3002\r\n\r\nOracle Java SE: 7u131, 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13\u5728\u5b9e\u73b0\u4e0a\u5b58\u5728\u8fdc\u7a0b\u5b89\u5168\u6f0f\u6d1e\uff0c\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5f71\u54cd\u5e94\u7528\u7684\u5b8c\u6574\u6027\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Oracle Java SE/JRockit\u8fdc\u7a0b\u5b89\u5168\u6f0f\u6d1e\uff08CNVD-2017-07163\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Oracle Java SE 6u141",
      "Oracle Java SE 7u131",
      "Oracle Java SE Embedded 8u121"
    ]
  },
  "referenceLink": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236624.html\r\nhttps://nvd.nist.gov/vuln/detail/CVE-2017-3544",
  "serverity": "\u4e2d",
  "submitTime": "2017-05-02",
  "title": "Oracle Java SE/JRockit\u8fdc\u7a0b\u5b89\u5168\u6f0f\u6d1e\uff08CNVD-2017-07163\uff09"
}

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Java",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Java SE: 6u141"
            },
            {
              "status": "affected",
              "version": "7u131"
            },
            {
              "status": "affected",
              "version": "8u121; Java SE Embedded: 8u121; JRockit: R28.3.13"
            }
          ]
        }
      ],
      "source": "secalert_us@oracle.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:jdk:1.6.0:update141:*:*:*:*:*:*",
              "matchCriteriaId": "8FD0F2F0-F307-4F3A-B719-D658467D6B8B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jdk:1.7.0:update131:*:*:*:*:*:*",
              "matchCriteriaId": "2BBA8749-EFC2-4055-A8AB-56D660C0BB70",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jdk:1.8.0:update121:*:*:*:*:*:*",
              "matchCriteriaId": "34D1F91C-50D2-4D6A-BF4B-1B86F6909565",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update141:*:*:*:*:*:*",
              "matchCriteriaId": "2A34F55B-3945-412E-80BD-23F39B3D68D5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.7.0:update_131:*:*:*:*:*:*",
              "matchCriteriaId": "7C4946FF-E16B-4188-8BEA-1D5ABFBD54DB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.8.0:update_121:*:*:*:*:*:*",
              "matchCriteriaId": "E463AEAC-F5DB-47E4-B863-E5D636895C51",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jrockit:r28.3.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA90A3B9-9749-44F5-BAFC-40BA2BD37B43",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "F4F86C3C-B99C-44C6-97D7-163DC3F59687",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "33C068A4-3780-4EAB-A937-6082DF847564",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "98381E61-F082-4302-B51F-5648884F998B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "D99A687E-EAE6-417E-A88E-D0082BC194CD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "B353CE99-D57C-465B-AAB0-73EF581127D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "A8442C20-41F9-47FD-9A12-E724D3A31FD7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "BF77CDCF-B9C9-427D-B2BF-36650FB2148C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "825ECE2D-E232-46E0-A047-074B34DB1E97",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:redhat:icedtea:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B92D4C9E-8707-4E05-B12D-28C1AFCE2637",
              "versionEndExcluding": "3.4.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3CEEA22-63B4-4702-A400-01349DF0EC1E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "E9915371-C730-41F7-B86E-7E4DE0DF5385",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "E70C6D8D-C9C3-4D92-8DFC-71F59E068295",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "691FA41B-C2CE-413F-ABB1-0B22CB322807",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D835D592-2423-44C6-804A-3AD010112E7C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "568E2561-A068-46A2-B331-BBA91FC96F0C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad en el componente Java SE, Java SE Embedded, JRockit de Oracle Java SE (subcomponente: Networking). Versiones compatibles que son afectadas son Java SE: 6u141, 7u131 y 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Vulnerabilidad dificil de explotar no permite autenticado atacante con acceso a la red a trav\u00e9s de SMTP para comprometer Java SE, Java SE Embedded, JRockit. Los ataques exitosos de esta vulnerabilidad pueden resultar en la actualizaci\u00f3n, inserci\u00f3n o eliminaci\u00f3n de acceso no autorizados a algunos de los datos accesibles de Java SE, Java SE Embedded y JRockit. Nota: Se aplica a la implementaci\u00f3n de cliente y servidor de Java. Esta vulnerabilidad puede ser explotada a trav\u00e9s de aplicaciones de Java Web Start y de Java. Tambi\u00e9n se puede explotar mediante el suministro de datos a las API en el Componente especificado sin utilizar aplicaciones de Java Web Start en modo recinto de seguridad o complementos de Java protegidos, como a trav\u00e9s de un servicio web.CVSS 3.0 Base Score 3.7 (Impactos de integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."
    }
  ],
  "id": "CVE-2017-3544",
  "lastModified": "2026-06-17T01:18:32.580",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 3.7,
          "baseSeverity": "LOW",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
          "version": "3.0"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 1.4,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2017-3544",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-10-07T15:44:53.644619Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2017-04-24T19:59:04.253",
  "references": [
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2017/dsa-3858"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/97745"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1038286"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1108"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1109"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1117"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1118"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1119"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1204"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1220"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1221"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1222"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:3453"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.gentoo.org/glsa/201705-03"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.gentoo.org/glsa/201707-01"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://source.android.com/security/bulletin/2017-07-01"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2017/dsa-3858"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/97745"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1038286"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1108"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1109"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1117"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1118"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1119"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1204"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1220"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1221"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:1222"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2017:3453"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.gentoo.org/glsa/201705-03"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.gentoo.org/glsa/201707-01"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://source.android.com/security/bulletin/2017-07-01"
    }
  ],
  "sourceIdentifier": "secalert_us@oracle.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2017-3544"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2017-04-24T19:59:00Z",
    "severity": "MODERATE"
  },
  "details": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
  "id": "GHSA-x9hr-p2wg-6f69",
  "modified": "2022-05-13T01:17:04Z",
  "published": "2022-05-13T01:17:04Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3544"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:1108"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:1109"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:1117"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:1118"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:1119"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:1204"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:1220"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:1221"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:1222"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:3453"
    },
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/201705-03"
    },
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/201707-01"
    },
    {
      "type": "WEB",
      "url": "https://source.android.com/security/bulletin/2017-07-01"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2017/dsa-3858"
    },
    {
      "type": "WEB",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/97745"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1038286"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2017-3544",
    "description": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
    "id": "GSD-2017-3544",
    "references": [
      "https://www.suse.com/security/cve/CVE-2017-3544.html",
      "https://www.debian.org/security/2017/dsa-3858",
      "https://access.redhat.com/errata/RHSA-2017:3453",
      "https://access.redhat.com/errata/RHSA-2017:1222",
      "https://access.redhat.com/errata/RHSA-2017:1221",
      "https://access.redhat.com/errata/RHSA-2017:1220",
      "https://access.redhat.com/errata/RHSA-2017:1204",
      "https://access.redhat.com/errata/RHSA-2017:1119",
      "https://access.redhat.com/errata/RHSA-2017:1118",
      "https://access.redhat.com/errata/RHSA-2017:1117",
      "https://access.redhat.com/errata/RHSA-2017:1109",
      "https://access.redhat.com/errata/RHSA-2017:1108",
      "https://ubuntu.com/security/CVE-2017-3544",
      "https://advisories.mageia.org/CVE-2017-3544.html",
      "https://alas.aws.amazon.com/cve/html/CVE-2017-3544.html",
      "https://linux.oracle.com/cve/CVE-2017-3544.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2017-3544"
      ],
      "details": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
      "id": "GSD-2017-3544",
      "modified": "2023-12-13T01:21:16.426921Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert_us@oracle.com",
        "ID": "CVE-2017-3544",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Java",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "Java SE: 6u141"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "7u131"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "8u121; Java SE Embedded: 8u121; JRockit: R28.3.13"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Oracle Corporation"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Java SE, Java SE Embedded, JRockit.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data."
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "RHSA-2017:1221",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:1221"
          },
          {
            "name": "GLSA-201705-03",
            "refsource": "GENTOO",
            "url": "https://security.gentoo.org/glsa/201705-03"
          },
          {
            "name": "97745",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/97745"
          },
          {
            "name": "RHSA-2017:1220",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:1220"
          },
          {
            "name": "RHSA-2017:1117",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:1117"
          },
          {
            "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
            "refsource": "CONFIRM",
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
          },
          {
            "name": "RHSA-2017:1109",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:1109"
          },
          {
            "name": "https://source.android.com/security/bulletin/2017-07-01",
            "refsource": "CONFIRM",
            "url": "https://source.android.com/security/bulletin/2017-07-01"
          },
          {
            "name": "1038286",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1038286"
          },
          {
            "name": "DSA-3858",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2017/dsa-3858"
          },
          {
            "name": "RHSA-2017:1108",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:1108"
          },
          {
            "name": "RHSA-2017:1204",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:1204"
          },
          {
            "name": "RHSA-2017:1118",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:1118"
          },
          {
            "name": "GLSA-201707-01",
            "refsource": "GENTOO",
            "url": "https://security.gentoo.org/glsa/201707-01"
          },
          {
            "name": "RHSA-2017:1222",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:1222"
          },
          {
            "name": "RHSA-2017:3453",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:3453"
          },
          {
            "name": "RHSA-2017:1119",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:1119"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:oracle:jrockit:r28.3.13:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:jre:1.7.0:update_131:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:jre:1.8.0:update_121:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:jdk:1.8.0:update121:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:jdk:1.7.0:update131:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:jdk:1.6.0:update141:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:jre:1.6.0:update141:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:redhat:icedtea:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "3.4.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2017-3544"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-noinfo"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html",
              "refsource": "CONFIRM",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html"
            },
            {
              "name": "97745",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/97745"
            },
            {
              "name": "GLSA-201705-03",
              "refsource": "GENTOO",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.gentoo.org/glsa/201705-03"
            },
            {
              "name": "GLSA-201707-01",
              "refsource": "GENTOO",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.gentoo.org/glsa/201707-01"
            },
            {
              "name": "1038286",
              "refsource": "SECTRACK",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securitytracker.com/id/1038286"
            },
            {
              "name": "https://source.android.com/security/bulletin/2017-07-01",
              "refsource": "CONFIRM",
              "tags": [
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://source.android.com/security/bulletin/2017-07-01"
            },
            {
              "name": "DSA-3858",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.debian.org/security/2017/dsa-3858"
            },
            {
              "name": "RHSA-2017:3453",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:3453"
            },
            {
              "name": "RHSA-2017:1222",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:1222"
            },
            {
              "name": "RHSA-2017:1221",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:1221"
            },
            {
              "name": "RHSA-2017:1220",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:1220"
            },
            {
              "name": "RHSA-2017:1204",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:1204"
            },
            {
              "name": "RHSA-2017:1119",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:1119"
            },
            {
              "name": "RHSA-2017:1118",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:1118"
            },
            {
              "name": "RHSA-2017:1117",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:1117"
            },
            {
              "name": "RHSA-2017:1109",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:1109"
            },
            {
              "name": "RHSA-2017:1108",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:1108"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "exploitabilityScore": 2.2,
          "impactScore": 1.4
        }
      },
      "lastModifiedDate": "2022-05-13T14:52Z",
      "publishedDate": "2017-04-24T19:59Z"
    }
  }
}