rhsa-2018:0099
Vulnerability from csaf_redhat
Published
2018-01-18 21:55
Modified
2024-11-15 02:06
Summary
Red Hat Security Advisory: java-1.8.0-oracle security update
Notes
Topic
An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Oracle Java SE version 8 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.
This update upgrades Oracle Java SE 8 to version 8 Update 161.
Security Fix(es):
* This update fixes multiple vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page listed in the References section. (CVE-2018-2579, CVE-2018-2581, CVE-2018-2582, CVE-2018-2588, CVE-2018-2599, CVE-2018-2602, CVE-2018-2603, CVE-2018-2618, CVE-2018-2627, CVE-2018-2629, CVE-2018-2633, CVE-2018-2634, CVE-2018-2637, CVE-2018-2638, CVE-2018-2639, CVE-2018-2641, CVE-2018-2663, CVE-2018-2677, CVE-2018-2678)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Critical", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Oracle Java SE version 8 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 8 to version 8 Update 161.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page listed in the References section. (CVE-2018-2579, CVE-2018-2581, CVE-2018-2582, CVE-2018-2588, CVE-2018-2599, CVE-2018-2602, CVE-2018-2603, CVE-2018-2618, CVE-2018-2627, CVE-2018-2629, CVE-2018-2633, CVE-2018-2634, CVE-2018-2637, CVE-2018-2638, CVE-2018-2639, CVE-2018-2641, CVE-2018-2663, CVE-2018-2677, CVE-2018-2678)", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2018:0099", url: "https://access.redhat.com/errata/RHSA-2018:0099", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#critical", url: "https://access.redhat.com/security/updates/classification/#critical", }, { category: "external", summary: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA", url: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA", }, { category: "external", summary: "http://www.oracle.com/technetwork/java/javase/8u161-relnotes-4021379.html", url: "http://www.oracle.com/technetwork/java/javase/8u161-relnotes-4021379.html", }, { category: "external", summary: "1534263", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534263", }, { category: "external", summary: "1534288", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534288", }, { category: "external", summary: "1534296", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534296", }, { category: "external", summary: "1534298", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534298", }, { category: "external", summary: "1534299", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534299", }, { category: "external", summary: "1534525", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534525", }, { category: "external", summary: "1534543", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534543", }, { category: "external", summary: "1534553", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534553", }, { category: "external", summary: "1534625", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534625", }, { category: "external", summary: "1534762", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534762", }, { category: "external", summary: "1534766", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534766", }, { category: "external", summary: "1534768", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534768", }, { category: "external", summary: "1534943", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534943", }, { category: "external", summary: "1534970", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534970", }, { category: "external", summary: "1535036", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1535036", }, { category: "external", summary: "1535350", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1535350", }, { category: "external", summary: "1535351", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1535351", }, { category: "external", summary: "1535352", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1535352", }, { category: "external", summary: "1535354", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1535354", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0099.json", }, ], title: "Red Hat Security Advisory: java-1.8.0-oracle security update", tracking: { current_release_date: "2024-11-15T02:06:17+00:00", generator: { date: "2024-11-15T02:06:17+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2018:0099", initial_release_date: "2018-01-18T21:55:29+00:00", revision_history: [ { date: "2018-01-18T21:55:29+00:00", number: "1", summary: "Initial version", }, { date: "2018-01-18T21:55:29+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-15T02:06:17+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Oracle Java for Red Hat Enterprise Linux Client (v. 7)", product: { name: "Oracle Java for Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-OracleJava-7.4.Z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras_oracle_java:7", }, }, }, { category: "product_name", name: "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", product: { name: "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", product_id: "7ComputeNode-OracleJava-7.4.Z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras_oracle_java:7", }, }, }, { category: "product_name", name: "Oracle Java for Red Hat Enterprise Linux Server (v. 7)", product: { name: "Oracle Java for Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-OracleJava-7.4.Z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras_oracle_java:7", }, }, }, { category: "product_name", name: "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-OracleJava-7.4.Z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras_oracle_java:7", }, }, }, { category: "product_name", name: "Oracle Java for Red Hat Enterprise Linux Desktop 6", product: { name: "Oracle Java for Red Hat Enterprise Linux Desktop 6", product_id: "6Client-OracleJava-6.9.Z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras_oracle_java:6", }, }, }, { category: "product_name", name: "Oracle Java for Red Hat Enterprise Linux HPC Node 6", product: { name: "Oracle Java for Red Hat Enterprise Linux HPC Node 6", product_id: "6ComputeNode-OracleJava-6.9.Z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras_oracle_java:6", }, }, }, { category: "product_name", name: "Oracle Java for Red Hat Enterprise Linux Server 6", product: { name: "Oracle Java for Red Hat Enterprise Linux Server 6", product_id: "6Server-OracleJava-6.9.Z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras_oracle_java:6", }, }, }, { category: "product_name", name: "Oracle Java for Red Hat Enterprise Linux Workstation 6", product: { name: "Oracle Java for Red Hat Enterprise Linux Workstation 6", product_id: "6Workstation-OracleJava-6.9.Z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras_oracle_java:6", }, }, }, ], category: "product_family", name: "Oracle Java for Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", product: { name: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", product_id: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-1.8.0-oracle-jdbc@1.8.0.161-1jpp.2.el7?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", product: { name: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", product_id: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-1.8.0-oracle-devel@1.8.0.161-1jpp.2.el7?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", product: { name: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", product_id: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-1.8.0-oracle-javafx@1.8.0.161-1jpp.2.el7?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", product: { name: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", product_id: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-1.8.0-oracle-src@1.8.0.161-1jpp.2.el7?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", product: { name: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", product_id: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-1.8.0-oracle-plugin@1.8.0.161-1jpp.2.el7?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", product: { name: "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", product_id: "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-1.8.0-oracle@1.8.0.161-1jpp.2.el7?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", product: { name: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", product_id: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-1.8.0-oracle-jdbc@1.8.0.161-1jpp.1.el6_9?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", product: { name: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", product_id: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-1.8.0-oracle-javafx@1.8.0.161-1jpp.1.el6_9?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", product: { name: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", product_id: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-1.8.0-oracle-devel@1.8.0.161-1jpp.1.el6_9?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", product: { name: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", product_id: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-1.8.0-oracle-plugin@1.8.0.161-1jpp.1.el6_9?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", product: { name: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", product_id: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-1.8.0-oracle-src@1.8.0.161-1jpp.1.el6_9?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", product: { name: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", product_id: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-1.8.0-oracle@1.8.0.161-1jpp.1.el6_9?arch=x86_64&epoch=1", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", product: { name: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", product_id: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/java-1.8.0-oracle-jdbc@1.8.0.161-1jpp.1.el6_9?arch=i686&epoch=1", }, }, }, { category: "product_version", name: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", product: { name: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", product_id: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/java-1.8.0-oracle-javafx@1.8.0.161-1jpp.1.el6_9?arch=i686&epoch=1", }, }, }, { category: "product_version", name: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", product: { name: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", product_id: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/java-1.8.0-oracle-devel@1.8.0.161-1jpp.1.el6_9?arch=i686&epoch=1", }, }, }, { category: "product_version", name: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", product: { name: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", product_id: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/java-1.8.0-oracle-plugin@1.8.0.161-1jpp.1.el6_9?arch=i686&epoch=1", }, }, }, { category: "product_version", name: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", product: { name: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", product_id: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/java-1.8.0-oracle-src@1.8.0.161-1jpp.1.el6_9?arch=i686&epoch=1", }, }, }, { category: "product_version", name: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", product: { name: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", product_id: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/java-1.8.0-oracle@1.8.0.161-1jpp.1.el6_9?arch=i686&epoch=1", }, }, }, ], category: "architecture", name: "i686", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", product_id: "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6Client-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", product_id: "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6Client-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", product_id: "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6Client-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", product_id: "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6Client-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", product_id: "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6Client-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", product_id: "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6Client-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", product_id: "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6Client-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", product_id: "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6Client-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", product_id: "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6Client-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", product_id: "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6Client-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", product_id: "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6Client-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", product_id: "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6Client-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", product_id: "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6ComputeNode-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", product_id: "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6ComputeNode-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", product_id: "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6ComputeNode-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", product_id: "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6ComputeNode-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", product_id: "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6ComputeNode-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", product_id: "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6ComputeNode-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", product_id: "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6ComputeNode-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", product_id: "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6ComputeNode-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", product_id: "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6ComputeNode-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", product_id: "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6ComputeNode-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", product_id: "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6ComputeNode-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", product_id: "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6ComputeNode-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", product_id: "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6Server-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", product_id: "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6Server-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", product_id: "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6Server-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", product_id: "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6Server-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", product_id: "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6Server-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", product_id: "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6Server-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", product_id: "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6Server-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", product_id: "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6Server-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", product_id: "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6Server-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", product_id: "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6Server-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", product_id: "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6Server-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", product_id: "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6Server-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", product_id: "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6Workstation-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", product_id: "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6Workstation-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", product_id: "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6Workstation-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", product_id: "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6Workstation-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", product_id: "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6Workstation-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", product_id: "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6Workstation-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", product_id: "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6Workstation-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", product_id: "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6Workstation-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", product_id: "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6Workstation-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", product_id: "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6Workstation-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", product_id: "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", }, product_reference: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", relates_to_product_reference: "6Workstation-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", product_id: "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", }, product_reference: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", relates_to_product_reference: "6Workstation-OracleJava-6.9.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7Client-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7Client-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7Client-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7Client-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7Client-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7Client-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", product_id: "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7ComputeNode-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", product_id: "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7ComputeNode-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", product_id: "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7ComputeNode-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", product_id: "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7ComputeNode-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", product_id: "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7ComputeNode-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", product_id: "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7ComputeNode-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7Server-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7Server-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7Server-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7Server-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7Server-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7Server-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7Workstation-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7Workstation-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7Workstation-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7Workstation-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7Workstation-OracleJava-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", }, product_reference: "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", relates_to_product_reference: "7Workstation-OracleJava-7.4.Z", }, ], }, vulnerabilities: [ { cve: "CVE-2018-2579", cwe: { id: "CWE-567", name: "Unsynchronized Access to Shared Data in a Multithreaded Context", }, discovery_date: "2017-12-21T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1534298", }, ], notes: [ { category: "description", text: "It was discovered that multiple encryption key classes in the Libraries component of OpenJDK did not properly synchronize access to their internal data. This could possibly cause a multi-threaded Java application to apply weak encryption to data because of the use of a key that was zeroed out.", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2579", }, { category: "external", summary: "RHBZ#1534298", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534298", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2579", url: "https://www.cve.org/CVERecord?id=CVE-2018-2579", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2579", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2579", }, ], release_date: "2018-01-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 3.7, baseSeverity: "LOW", confidentialityImpact: "LOW", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)", }, { cve: "CVE-2018-2581", discovery_date: "2018-01-16T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1535354", }, ], notes: [ { category: "description", text: "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u161, 8u152 and 9.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N).", title: "Vulnerability description", }, { category: "summary", text: "JDK: unspecified vulnerability fixed in 7u171, 8u161, and 9.0.4 (JavaFX)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2581", }, { category: "external", summary: "RHBZ#1535354", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1535354", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2581", url: "https://www.cve.org/CVERecord?id=CVE-2018-2581", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2581", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2581", }, { category: "external", summary: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA", url: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA", }, ], release_date: "2018-01-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "JDK: unspecified vulnerability fixed in 7u171, 8u161, and 9.0.4 (JavaFX)", }, { cve: "CVE-2018-2582", discovery_date: "2017-12-21T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1534768", }, ], notes: [ { category: "description", text: "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N).", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2582", }, { category: "external", summary: "RHBZ#1534768", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534768", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2582", url: "https://www.cve.org/CVERecord?id=CVE-2018-2582", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2582", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2582", }, ], release_date: "2018-01-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962)", }, { cve: "CVE-2018-2588", cwe: { id: "CWE-90", name: "Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')", }, discovery_date: "2017-12-21T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1534299", }, ], notes: [ { category: "description", text: "It was discovered that the LDAP component of OpenJDK failed to properly encode special characters in user names when adding them to an LDAP search query. A remote attacker could possibly use this flaw to manipulate LDAP queries performed by the LdapLoginModule class.", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2588", }, { category: "external", summary: "RHBZ#1534299", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534299", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2588", url: "https://www.cve.org/CVERecord?id=CVE-2018-2588", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2588", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2588", }, ], release_date: "2018-01-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "NONE", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)", }, { cve: "CVE-2018-2599", cwe: { id: "CWE-330", name: "Use of Insufficiently Random Values", }, discovery_date: "2017-12-21T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1534543", }, ], notes: [ { category: "description", text: "It was discovered that the DNS client implementation in the JNDI component of OpenJDK did not use random source ports when sending out DNS queries. This could make it easier for a remote attacker to spoof responses to those queries.", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2599", }, { category: "external", summary: "RHBZ#1534543", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534543", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2599", url: "https://www.cve.org/CVERecord?id=CVE-2018-2599", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2599", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2599", }, ], release_date: "2018-01-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.8, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "LOW", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)", }, { cve: "CVE-2018-2602", cwe: { id: "CWE-426", name: "Untrusted Search Path", }, discovery_date: "2017-12-21T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1534525", }, ], notes: [ { category: "description", text: "It was discovered that the I18n component of OpenJDK could use an untrusted search path when loading resource bundle classes. A local attacker could possibly use this flaw to execute arbitrary code as another local user by making their Java application load an attacker controlled class file.", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: loading of classes from untrusted locations (I18n, 8182601)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2602", }, { category: "external", summary: "RHBZ#1534525", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534525", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2602", url: "https://www.cve.org/CVERecord?id=CVE-2018-2602", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2602", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2602", }, ], release_date: "2018-01-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "LOCAL", availabilityImpact: "LOW", baseScore: 4.5, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "OpenJDK: loading of classes from untrusted locations (I18n, 8182601)", }, { cve: "CVE-2018-2603", cwe: { id: "CWE-770", name: "Allocation of Resources Without Limits or Throttling", }, discovery_date: "2017-12-21T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1534553", }, ], notes: [ { category: "description", text: "It was discovered that the Libraries component of OpenJDK failed to sufficiently limit the amount of memory allocated when reading DER encoded input. A remote attacker could possibly use this flaw to make a Java application use an excessive amount of memory if it parsed attacker supplied DER encoded input.", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2603", }, { category: "external", summary: "RHBZ#1534553", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534553", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2603", url: "https://www.cve.org/CVERecord?id=CVE-2018-2603", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2603", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2603", }, ], release_date: "2018-01-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)", }, { cve: "CVE-2018-2618", cwe: { id: "CWE-327", name: "Use of a Broken or Risky Cryptographic Algorithm", }, discovery_date: "2017-12-21T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1534762", }, ], notes: [ { category: "description", text: "It was discovered that the key agreement implementations in the JCE component of OpenJDK did not guarantee sufficient strength of used keys to adequately protect generated shared secret. This could make it easier to break data encryption by attacking key agreement rather than the encryption using the negotiated secret.", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: insufficient strength of key agreement (JCE, 8185292)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2618", }, { category: "external", summary: "RHBZ#1534762", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534762", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2618", url: "https://www.cve.org/CVERecord?id=CVE-2018-2618", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2618", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2618", }, ], release_date: "2018-01-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.9, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "OpenJDK: insufficient strength of key agreement (JCE, 8185292)", }, { cve: "CVE-2018-2627", discovery_date: "2018-01-16T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1535352", }, ], notes: [ { category: "description", text: "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to the Windows installer only. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H).", title: "Vulnerability description", }, { category: "summary", text: "JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Installer)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2627", }, { category: "external", summary: "RHBZ#1535352", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1535352", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2627", url: "https://www.cve.org/CVERecord?id=CVE-2018-2627", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2627", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2627", }, { category: "external", summary: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA", url: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA", }, ], release_date: "2018-01-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Installer)", }, { cve: "CVE-2018-2629", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-12-21T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1534625", }, ], notes: [ { category: "description", text: "It was discovered that the JGSS component of OpenJDK failed to properly handle GSS context in the native GSS library wrapper in certain cases. A remote attacker could possibly make a Java application using JGSS to use a previously freed context.", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: GSS context use-after-free (JGSS, 8186212)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2629", }, { category: "external", summary: "RHBZ#1534625", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534625", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2629", url: "https://www.cve.org/CVERecord?id=CVE-2018-2629", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2629", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2629", }, ], release_date: "2018-01-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "OpenJDK: GSS context use-after-free (JGSS, 8186212)", }, { cve: "CVE-2018-2633", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2017-12-21T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1535036", }, ], notes: [ { category: "description", text: "It was discovered that the LDAPCertStore class in the JNDI component of OpenJDK failed to securely handle LDAP referrals. An attacker could possibly use this flaw to make it fetch attacker controlled certificate data.", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2633", }, { category: "external", summary: "RHBZ#1535036", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1535036", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2633", url: "https://www.cve.org/CVERecord?id=CVE-2018-2633", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2633", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2633", }, ], release_date: "2018-01-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.3, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)", }, { cve: "CVE-2018-2634", cwe: { id: "CWE-284", name: "Improper Access Control", }, discovery_date: "2017-12-21T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1534943", }, ], notes: [ { category: "description", text: "The JGSS component of OpenJDK ignores the value of the javax.security.auth.useSubjectCredsOnly property when using HTTP/SPNEGO authentication and always uses global credentials. It was discovered that this could cause global credentials to be unexpectedly used by an untrusted Java application.", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2634", }, { category: "external", summary: "RHBZ#1534943", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534943", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2634", url: "https://www.cve.org/CVERecord?id=CVE-2018-2634", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2634", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2634", }, ], release_date: "2018-01-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.8, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)", }, { cve: "CVE-2018-2637", cwe: { id: "CWE-502", name: "Deserialization of Untrusted Data", }, discovery_date: "2017-12-21T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1534970", }, ], notes: [ { category: "description", text: "It was discovered that the JMX component of OpenJDK failed to properly set the deserialization filter for the SingleEntryRegistry in certain cases. A remote attacker could possibly use this flaw to bypass intended deserialization restrictions.", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2637", }, { category: "external", summary: "RHBZ#1534970", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534970", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2637", url: "https://www.cve.org/CVERecord?id=CVE-2018-2637", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2637", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2637", }, ], release_date: "2018-01-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)", }, { cve: "CVE-2018-2638", discovery_date: "2018-01-16T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1535350", }, ], notes: [ { category: "description", text: "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", title: "Vulnerability description", }, { category: "summary", text: "JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2638", }, { category: "external", summary: "RHBZ#1535350", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1535350", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2638", url: "https://www.cve.org/CVERecord?id=CVE-2018-2638", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2638", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2638", }, { category: "external", summary: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA", url: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA", }, ], release_date: "2018-01-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)", }, { cve: "CVE-2018-2639", discovery_date: "2018-01-16T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1535351", }, ], notes: [ { category: "description", text: "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", title: "Vulnerability description", }, { category: "summary", text: "JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2639", }, { category: "external", summary: "RHBZ#1535351", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1535351", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2639", url: "https://www.cve.org/CVERecord?id=CVE-2018-2639", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2639", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2639", }, { category: "external", summary: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA", url: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA", }, ], release_date: "2018-01-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)", }, { cve: "CVE-2018-2641", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-12-21T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1534766", }, ], notes: [ { category: "description", text: "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N).", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: GTK library loading use-after-free (AWT, 8185325)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2641", }, { category: "external", summary: "RHBZ#1534766", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534766", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2641", url: "https://www.cve.org/CVERecord?id=CVE-2018-2641", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2641", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2641", }, ], release_date: "2018-01-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.1, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "OpenJDK: GTK library loading use-after-free (AWT, 8185325)", }, { cve: "CVE-2018-2663", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2017-12-21T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1534296", }, ], notes: [ { category: "description", text: "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2663", }, { category: "external", summary: "RHBZ#1534296", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534296", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2663", url: "https://www.cve.org/CVERecord?id=CVE-2018-2663", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2663", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2663", }, ], release_date: "2018-01-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)", }, { cve: "CVE-2018-2677", cwe: { id: "CWE-770", name: "Allocation of Resources Without Limits or Throttling", }, discovery_date: "2017-12-21T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1534288", }, ], notes: [ { category: "description", text: "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2677", }, { category: "external", summary: "RHBZ#1534288", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534288", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2677", url: "https://www.cve.org/CVERecord?id=CVE-2018-2677", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2677", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2677", }, ], release_date: "2018-01-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)", }, { cve: "CVE-2018-2678", cwe: { id: "CWE-770", name: "Allocation of Resources Without Limits or Throttling", }, discovery_date: "2017-12-21T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1534263", }, ], notes: [ { category: "description", text: "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2678", }, { category: "external", summary: "RHBZ#1534263", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1534263", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2678", url: "https://www.cve.org/CVERecord?id=CVE-2018-2678", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2678", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2678", }, ], release_date: "2018-01-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)", }, { cve: "CVE-2018-2783", discovery_date: "2018-04-17T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1569204", }, ], notes: [ { category: "description", text: "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", title: "Vulnerability description", }, { category: "summary", text: "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2018-2783", }, { category: "external", summary: "RHBZ#1569204", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1569204", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2018-2783", url: "https://www.cve.org/CVERecord?id=CVE-2018-2783", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-2783", url: "https://nvd.nist.gov/vuln/detail/CVE-2018-2783", }, { category: "external", summary: "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA", url: "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA", }, ], release_date: "2018-04-17T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-01-18T21:55:29+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", product_ids: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2018:0099", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", version: "3.0", }, products: [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64", "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.