Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2018-2783 (GCVE-0-2018-2783)
Vulnerability from cvelistv5
Published
2018-04-19 02:00
Modified
2024-10-03 20:19
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T04:29:44.741Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "RHSA-2018:1975",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1975"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us"
},
{
"name": "1040697",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1040697"
},
{
"name": "RHSA-2018:1724",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1724"
},
{
"name": "RHSA-2018:1203",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
},
{
"name": "USN-3644-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/3644-1/"
},
{
"name": "RHSA-2018:1723",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1723"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20180419-0001/"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
},
{
"name": "RHSA-2018:1722",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1722"
},
{
"name": "RHSA-2018:1974",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1974"
},
{
"name": "RHSA-2018:1205",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
},
{
"name": "RHSA-2018:1721",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1721"
},
{
"name": "103832",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/103832"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2018-2783",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-10-03T19:20:39.941493Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-10-03T20:19:22.002Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2018-03-27T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-03-20T00:06:05",
"orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
"shortName": "oracle"
},
"references": [
{
"name": "RHSA-2018:1975",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1975"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us"
},
{
"name": "1040697",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1040697"
},
{
"name": "RHSA-2018:1724",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1724"
},
{
"name": "RHSA-2018:1203",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
},
{
"name": "USN-3644-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/3644-1/"
},
{
"name": "RHSA-2018:1723",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1723"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://security.netapp.com/advisory/ntap-20180419-0001/"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
},
{
"name": "RHSA-2018:1722",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1722"
},
{
"name": "RHSA-2018:1974",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1974"
},
{
"name": "RHSA-2018:1205",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
},
{
"name": "RHSA-2018:1721",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1721"
},
{
"name": "103832",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/103832"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "secalert_us@oracle.com",
"ID": "CVE-2018-2783",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2018:1975",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1975"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us",
"refsource": "CONFIRM",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us"
},
{
"name": "1040697",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1040697"
},
{
"name": "RHSA-2018:1724",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1724"
},
{
"name": "RHSA-2018:1203",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
},
{
"name": "USN-3644-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3644-1/"
},
{
"name": "RHSA-2018:1723",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1723"
},
{
"name": "https://security.netapp.com/advisory/ntap-20180419-0001/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20180419-0001/"
},
{
"name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
"refsource": "CONFIRM",
"url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
},
{
"name": "RHSA-2018:1722",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1722"
},
{
"name": "RHSA-2018:1974",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1974"
},
{
"name": "RHSA-2018:1205",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
},
{
"name": "RHSA-2018:1721",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1721"
},
{
"name": "103832",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/103832"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us",
"refsource": "CONFIRM",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
"assignerShortName": "oracle",
"cveId": "CVE-2018-2783",
"datePublished": "2018-04-19T02:00:00",
"dateReserved": "2017-12-15T00:00:00",
"dateUpdated": "2024-10-03T20:19:22.002Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2018-2783\",\"sourceIdentifier\":\"secalert_us@oracle.com\",\"published\":\"2018-04-19T02:29:03.020\",\"lastModified\":\"2024-11-21T04:04:26.593\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: Security). Las versiones compatibles que se han visto afectadas son JavaSE: 6u181, 7u161 y 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Una vulnerabilidad dif\u00edcilmente explotable permite que un atacante sin autenticar que tenga acceso a red por m\u00faltiples protocolos comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualizaci\u00f3n, inserci\u00f3n o supresi\u00f3n de datos confidenciales o de todos los datos accesibles de Java SE, Java SE Embedded y JRockit, as\u00ed como el acceso sin autorizaci\u00f3n a datos confidenciales o todos los datos accesibles de Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad aplica a la implementaci\u00f3n del cliente y el servidor de Java. Esta vulnerabilidad puede ser explotada mediante aplicaciones Java Web Start en sandbox y applets Java en sandbox. Tambi\u00e9n puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start o applets Java en sandbox, como a trav\u00e9s de un servicio web. CVSS 3.0 Base Score 7.4 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N\",\"baseScore\":7.4,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.2,\"impactScore\":5.2}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:N\",\"baseScore\":5.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":4.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update181:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B9A0DD9-878D-42E8-AA57-283E5D1E0A64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.7.0:update161:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AA4AF8B-2E5E-4A5E-8930-B53A01A22C78\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.8.0:update152:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2EB8815-20EE-4A0B-A001-73995114333D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update181:*:*:*:*:*:*\",\"matchCriteriaId\":\"DD3B3C9B-A53B-4921-8F5F-FF118283D958\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.7.0:update161:*:*:*:*:*:*\",\"matchCriteriaId\":\"32F5FDBE-ED30-48A9-B130-A48309C7D2CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.8.0:update152:*:*:*:*:*:*\",\"matchCriteriaId\":\"1988C207-4D9F-4FD2-9652-30CB2C65FE8C\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jrockit:r28.3.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A13AA87-5F14-4728-B317-17C3A782FA34\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D4840254-CC76-4113-BC61-360BD15582B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"85EA16E0-9261-45C4-840F-5366E9EAC5E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4F86C3C-B99C-44C6-97D7-163DC3F59687\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33C068A4-3780-4EAB-A937-6082DF847564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BBCD86A-E6C7-4444-9D74-F861084090F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51EF4996-72F4-4FA4-814F-F5991E7A8318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*\",\"matchCriteriaId\":\"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9070C9D8-A14A-467F-8253-33B966C16886\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*\",\"matchCriteriaId\":\"87D4ED85-90F6-47E6-BF08-3595DB22C7B1\"}]}]}],\"references\":[{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/103832\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.securitytracker.com/id/1040697\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1203\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1205\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1721\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1722\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1723\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1724\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1974\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1975\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20180419-0001/\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3644-1/\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/103832\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.securitytracker.com/id/1040697\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1203\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1205\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1721\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1722\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1723\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1724\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1974\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1975\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20180419-0001/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3644-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://access.redhat.com/errata/RHSA-2018:1975\", \"name\": \"RHSA-2018:1975\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1040697\", \"name\": \"1040697\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1724\", \"name\": \"RHSA-2018:1724\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1203\", \"name\": \"RHSA-2018:1203\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://usn.ubuntu.com/3644-1/\", \"name\": \"USN-3644-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1723\", \"name\": \"RHSA-2018:1723\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20180419-0001/\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1722\", \"name\": \"RHSA-2018:1722\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1974\", \"name\": \"RHSA-2018:1974\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1205\", \"name\": \"RHSA-2018:1205\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1721\", \"name\": \"RHSA-2018:1721\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"http://www.securityfocus.com/bid/103832\", \"name\": \"103832\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\", \"x_transferred\"]}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-05T04:29:44.741Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2018-2783\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-03T19:20:39.941493Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-03T19:21:10.439Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"n/a\", \"product\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"n/a\"}]}], \"datePublic\": \"2018-03-27T00:00:00\", \"references\": [{\"url\": \"https://access.redhat.com/errata/RHSA-2018:1975\", \"name\": \"RHSA-2018:1975\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"http://www.securitytracker.com/id/1040697\", \"name\": \"1040697\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1724\", \"name\": \"RHSA-2018:1724\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1203\", \"name\": \"RHSA-2018:1203\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://usn.ubuntu.com/3644-1/\", \"name\": \"USN-3644-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1723\", \"name\": \"RHSA-2018:1723\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20180419-0001/\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1722\", \"name\": \"RHSA-2018:1722\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1974\", \"name\": \"RHSA-2018:1974\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1205\", \"name\": \"RHSA-2018:1205\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1721\", \"name\": \"RHSA-2018:1721\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"http://www.securityfocus.com/bid/103832\", \"name\": \"103832\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\"]}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us\", \"tags\": [\"x_refsource_CONFIRM\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"n/a\"}]}], \"providerMetadata\": {\"orgId\": \"43595867-4340-4103-b7a2-9a5208d29a85\", \"shortName\": \"oracle\", \"dateUpdated\": \"2019-03-20T00:06:05\"}, \"x_legacyV4Record\": {\"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"version\": {\"version_data\": [{\"version_value\": \"n/a\"}]}, \"product_name\": \"n/a\"}]}, \"vendor_name\": \"n/a\"}]}}, \"data_type\": \"CVE\", \"references\": {\"reference_data\": [{\"url\": \"https://access.redhat.com/errata/RHSA-2018:1975\", \"name\": \"RHSA-2018:1975\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us\", \"name\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us\", \"refsource\": \"CONFIRM\"}, {\"url\": \"http://www.securitytracker.com/id/1040697\", \"name\": \"1040697\", \"refsource\": \"SECTRACK\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1724\", \"name\": \"RHSA-2018:1724\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1203\", \"name\": \"RHSA-2018:1203\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://usn.ubuntu.com/3644-1/\", \"name\": \"USN-3644-1\", \"refsource\": \"UBUNTU\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1723\", \"name\": \"RHSA-2018:1723\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://security.netapp.com/advisory/ntap-20180419-0001/\", \"name\": \"https://security.netapp.com/advisory/ntap-20180419-0001/\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0\", \"name\": \"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0\", \"refsource\": \"CONFIRM\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\", \"name\": \"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1722\", \"name\": \"RHSA-2018:1722\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1974\", \"name\": \"RHSA-2018:1974\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1205\", \"name\": \"RHSA-2018:1205\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1721\", \"name\": \"RHSA-2018:1721\", \"refsource\": \"REDHAT\"}, {\"url\": \"http://www.securityfocus.com/bid/103832\", \"name\": \"103832\", \"refsource\": \"BID\"}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us\", \"name\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us\", \"refsource\": \"CONFIRM\"}]}, \"data_format\": \"MITRE\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"n/a\"}]}]}, \"data_version\": \"4.0\", \"CVE_data_meta\": {\"ID\": \"CVE-2018-2783\", \"STATE\": \"PUBLIC\", \"ASSIGNER\": \"secalert_us@oracle.com\"}}}}",
"cveMetadata": "{\"cveId\": \"CVE-2018-2783\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-10-03T20:19:22.002Z\", \"dateReserved\": \"2017-12-15T00:00:00\", \"assignerOrgId\": \"43595867-4340-4103-b7a2-9a5208d29a85\", \"datePublished\": \"2018-04-19T02:00:00\", \"assignerShortName\": \"oracle\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
rhsa-2018:1974
Vulnerability from csaf_redhat
Published
2018-06-25 14:57
Modified
2025-08-04 11:59
Summary
Red Hat Security Advisory: java-1.7.1-ibm security update
Notes
Topic
An update for java-1.7.1-ibm is now available for Red Hat Satellite 5.6 and Red Hat Satellite 5.7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 7 to version 7R1 SR4-FP25.
Security Fix(es):
* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)
* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)
* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)
* OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) (CVE-2018-2796)
* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)
* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)
* OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) (CVE-2018-2799)
* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)
* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.7.1-ibm is now available for Red Hat Satellite 5.6 and Red Hat Satellite 5.7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 7 to version 7R1 SR4-FP25.\n\nSecurity Fix(es):\n\n* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)\n\n* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)\n\n* OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) (CVE-2018-2796)\n\n* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)\n\n* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)\n\n* OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) (CVE-2018-2799)\n\n* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)\n\n* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1974",
"url": "https://access.redhat.com/errata/RHSA-2018:1974"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1567126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126"
},
{
"category": "external",
"summary": "1567351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351"
},
{
"category": "external",
"summary": "1567542",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542"
},
{
"category": "external",
"summary": "1567543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543"
},
{
"category": "external",
"summary": "1567545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545"
},
{
"category": "external",
"summary": "1567546",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546"
},
{
"category": "external",
"summary": "1568163",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163"
},
{
"category": "external",
"summary": "1568515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515"
},
{
"category": "external",
"summary": "1569204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1974.json"
}
],
"title": "Red Hat Security Advisory: java-1.7.1-ibm security update",
"tracking": {
"current_release_date": "2025-08-04T11:59:36+00:00",
"generator": {
"date": "2025-08-04T11:59:36+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:1974",
"initial_release_date": "2018-06-25T14:57:13+00:00",
"revision_history": [
{
"date": "2018-06-25T14:57:13+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-06-25T14:57:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T11:59:36+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 5.6 (RHEL v.6)",
"product": {
"name": "Red Hat Satellite 5.6 (RHEL v.6)",
"product_id": "6Server-Satellite56",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:network_satellite:5.6::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 5.7 (RHEL v.6)",
"product": {
"name": "Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:network_satellite:5.7::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.3.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.3.el6?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.3.el6?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.3.el6?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x as a component of Red Hat Satellite 5.6 (RHEL v.6)",
"product_id": "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"relates_to_product_reference": "6Server-Satellite56"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64 as a component of Red Hat Satellite 5.6 (RHEL v.6)",
"product_id": "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Server-Satellite56"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x as a component of Red Hat Satellite 5.6 (RHEL v.6)",
"product_id": "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"relates_to_product_reference": "6Server-Satellite56"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64 as a component of Red Hat Satellite 5.6 (RHEL v.6)",
"product_id": "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Server-Satellite56"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64 as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64 as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"relates_to_product_reference": "6Server-Satellite57"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2783",
"discovery_date": "2018-04-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1569204"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2783"
},
{
"category": "external",
"summary": "RHBZ#1569204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-25T14:57:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1974"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)"
},
{
"cve": "CVE-2018-2790",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1568515"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2790"
},
{
"category": "external",
"summary": "RHBZ#1568515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2790",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2790"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-25T14:57:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1974"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)"
},
{
"cve": "CVE-2018-2794",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567126"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2794"
},
{
"category": "external",
"summary": "RHBZ#1567126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2794",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2794"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-25T14:57:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1974"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)"
},
{
"cve": "CVE-2018-2795",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567351"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2795"
},
{
"category": "external",
"summary": "RHBZ#1567351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2795",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2795"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-25T14:57:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1974"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)"
},
{
"cve": "CVE-2018-2796",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567546"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2796"
},
{
"category": "external",
"summary": "RHBZ#1567546",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2796",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2796"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-25T14:57:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1974"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)"
},
{
"cve": "CVE-2018-2797",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567545"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2797"
},
{
"category": "external",
"summary": "RHBZ#1567545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2797",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-25T14:57:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1974"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)"
},
{
"cve": "CVE-2018-2798",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567543"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2798"
},
{
"category": "external",
"summary": "RHBZ#1567543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2798",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-25T14:57:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1974"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)"
},
{
"cve": "CVE-2018-2799",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567542"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2799"
},
{
"category": "external",
"summary": "RHBZ#1567542",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2799",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2799"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-25T14:57:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1974"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)"
},
{
"cve": "CVE-2018-2800",
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1568163"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2800"
},
{
"category": "external",
"summary": "RHBZ#1568163",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2800",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-25T14:57:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1974"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)"
}
]
}
rhsa-2018:1205
Vulnerability from csaf_redhat
Published
2018-04-23 22:38
Modified
2025-08-04 11:59
Summary
Red Hat Security Advisory: java-1.6.0-sun security update
Notes
Topic
An update for java-1.6.0-sun is now available for Oracle Java for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.
This update upgrades Oracle Java SE 6 to version 6 Update 191.
Security Fix(es):
* OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025) (CVE-2018-2814)
* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)
* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)
* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)
* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)
* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)
* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)
* OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757) (CVE-2018-2815)
* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.6.0-sun is now available for Oracle Java for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 6 to version 6 Update 191.\n\nSecurity Fix(es):\n\n* OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025) (CVE-2018-2814)\n\n* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)\n\n* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)\n\n* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)\n\n* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)\n\n* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)\n\n* OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757) (CVE-2018-2815)\n\n* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1205",
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1567121",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567121"
},
{
"category": "external",
"summary": "1567126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126"
},
{
"category": "external",
"summary": "1567351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351"
},
{
"category": "external",
"summary": "1567537",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567537"
},
{
"category": "external",
"summary": "1567543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543"
},
{
"category": "external",
"summary": "1567545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545"
},
{
"category": "external",
"summary": "1568163",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163"
},
{
"category": "external",
"summary": "1568515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515"
},
{
"category": "external",
"summary": "1569204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1205.json"
}
],
"title": "Red Hat Security Advisory: java-1.6.0-sun security update",
"tracking": {
"current_release_date": "2025-08-04T11:59:41+00:00",
"generator": {
"date": "2025-08-04T11:59:41+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:1205",
"initial_release_date": "2018-04-23T22:38:49+00:00",
"revision_history": [
{
"date": "2018-04-23T22:38:49+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-04-23T22:38:49+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T11:59:41+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
}
],
"category": "product_family",
"name": "Oracle Java for Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"product_id": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.191-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"product_id": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.191-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"product_id": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.191-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"product_id": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.191-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"product_id": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.191-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"product_id": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.191-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"product": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"product_id": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.191-1jpp.1.el7?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"product": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"product_id": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.191-1jpp.1.el7?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2783",
"discovery_date": "2018-04-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1569204"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2783"
},
{
"category": "external",
"summary": "RHBZ#1569204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-23T22:38:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)"
},
{
"cve": "CVE-2018-2790",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1568515"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2790"
},
{
"category": "external",
"summary": "RHBZ#1568515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2790",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2790"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-23T22:38:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)"
},
{
"cve": "CVE-2018-2794",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567126"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2794"
},
{
"category": "external",
"summary": "RHBZ#1567126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2794",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2794"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-23T22:38:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)"
},
{
"cve": "CVE-2018-2795",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567351"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2795"
},
{
"category": "external",
"summary": "RHBZ#1567351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2795",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2795"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-23T22:38:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)"
},
{
"cve": "CVE-2018-2797",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567545"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2797"
},
{
"category": "external",
"summary": "RHBZ#1567545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2797",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-23T22:38:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)"
},
{
"cve": "CVE-2018-2798",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567543"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2798"
},
{
"category": "external",
"summary": "RHBZ#1567543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2798",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-23T22:38:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)"
},
{
"cve": "CVE-2018-2800",
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1568163"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2800"
},
{
"category": "external",
"summary": "RHBZ#1568163",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2800",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-23T22:38:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)"
},
{
"cve": "CVE-2018-2814",
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567121"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2814"
},
{
"category": "external",
"summary": "RHBZ#1567121",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567121"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2814",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2814"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-23T22:38:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025)"
},
{
"cve": "CVE-2018-2815",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567537"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2815"
},
{
"category": "external",
"summary": "RHBZ#1567537",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567537"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2815",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2815"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2815",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2815"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-23T22:38:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757)"
}
]
}
rhsa-2018:0100
Vulnerability from csaf_redhat
Published
2018-01-18 21:55
Modified
2025-08-04 11:58
Summary
Red Hat Security Advisory: java-1.7.0-oracle security update
Notes
Topic
An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.
This update upgrades Oracle Java SE 7 to version 7 Update 171.
Security Fix(es):
* This update fixes multiple vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page listed in the References section. (CVE-2018-2579, CVE-2018-2581, CVE-2018-2588, CVE-2018-2599, CVE-2018-2602, CVE-2018-2603, CVE-2018-2618, CVE-2018-2629, CVE-2018-2633, CVE-2018-2634, CVE-2018-2637, CVE-2018-2641, CVE-2018-2657, CVE-2018-2663, CVE-2018-2677, CVE-2018-2678)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 7 to version 7 Update 171.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page listed in the References section. (CVE-2018-2579, CVE-2018-2581, CVE-2018-2588, CVE-2018-2599, CVE-2018-2602, CVE-2018-2603, CVE-2018-2618, CVE-2018-2629, CVE-2018-2633, CVE-2018-2634, CVE-2018-2637, CVE-2018-2641, CVE-2018-2657, CVE-2018-2663, CVE-2018-2677, CVE-2018-2678)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:0100",
"url": "https://access.redhat.com/errata/RHSA-2018:0100"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_171",
"url": "http://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_171"
},
{
"category": "external",
"summary": "1534263",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534263"
},
{
"category": "external",
"summary": "1534288",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534288"
},
{
"category": "external",
"summary": "1534296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534296"
},
{
"category": "external",
"summary": "1534298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534298"
},
{
"category": "external",
"summary": "1534299",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534299"
},
{
"category": "external",
"summary": "1534525",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534525"
},
{
"category": "external",
"summary": "1534543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534543"
},
{
"category": "external",
"summary": "1534553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534553"
},
{
"category": "external",
"summary": "1534625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534625"
},
{
"category": "external",
"summary": "1534762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534762"
},
{
"category": "external",
"summary": "1534766",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534766"
},
{
"category": "external",
"summary": "1534943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534943"
},
{
"category": "external",
"summary": "1534970",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534970"
},
{
"category": "external",
"summary": "1535036",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535036"
},
{
"category": "external",
"summary": "1535353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535353"
},
{
"category": "external",
"summary": "1535354",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535354"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0100.json"
}
],
"title": "Red Hat Security Advisory: java-1.7.0-oracle security update",
"tracking": {
"current_release_date": "2025-08-04T11:58:38+00:00",
"generator": {
"date": "2025-08-04T11:58:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:0100",
"initial_release_date": "2018-01-18T21:55:56+00:00",
"revision_history": [
{
"date": "2018-01-18T21:55:56+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-01-18T21:55:56+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T11:58:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Server 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
}
],
"category": "product_family",
"name": "Oracle Java for Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"product_id": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.171-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"product_id": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.171-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.171-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"product_id": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.171-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"product_id": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.171-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"product_id": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.171-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"product": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"product_id": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.171-1jpp.1.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"product": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"product_id": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.171-1jpp.1.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"product": {
"name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"product_id": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.171-1jpp.1.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"product": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"product_id": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.171-1jpp.1.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"product": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.171-1jpp.1.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"product": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"product_id": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.171-1jpp.1.el6_9?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"product": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"product_id": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.171-1jpp.1.el7?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"product": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"product_id": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.171-1jpp.1.el7?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"product": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"product_id": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.171-1jpp.1.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"product": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"product_id": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.171-1jpp.1.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"product": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"product_id": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.171-1jpp.1.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"product": {
"name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"product_id": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.171-1jpp.1.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"product": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.171-1jpp.1.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"product": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"product_id": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.171-1jpp.1.el6_9?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2579",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534298"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that multiple encryption key classes in the Libraries component of OpenJDK did not properly synchronize access to their internal data. This could possibly cause a multi-threaded Java application to apply weak encryption to data because of the use of a key that was zeroed out.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2579"
},
{
"category": "external",
"summary": "RHBZ#1534298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534298"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2579",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2579"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2579",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2579"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0100"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)"
},
{
"cve": "CVE-2018-2581",
"discovery_date": "2018-01-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1535354"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u161, 8u152 and 9.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 7u171, 8u161, and 9.0.4 (JavaFX)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2581"
},
{
"category": "external",
"summary": "RHBZ#1535354",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535354"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2581",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2581"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2581",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2581"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0100"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 7u171, 8u161, and 9.0.4 (JavaFX)"
},
{
"cve": "CVE-2018-2588",
"cwe": {
"id": "CWE-90",
"name": "Improper Neutralization of Special Elements used in an LDAP Query (\u0027LDAP Injection\u0027)"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534299"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the LDAP component of OpenJDK failed to properly encode special characters in user names when adding them to an LDAP search query. A remote attacker could possibly use this flaw to manipulate LDAP queries performed by the LdapLoginModule class.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2588"
},
{
"category": "external",
"summary": "RHBZ#1534299",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534299"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2588",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2588"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2588",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2588"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0100"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)"
},
{
"cve": "CVE-2018-2599",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534543"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the DNS client implementation in the JNDI component of OpenJDK did not use random source ports when sending out DNS queries. This could make it easier for a remote attacker to spoof responses to those queries.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2599"
},
{
"category": "external",
"summary": "RHBZ#1534543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534543"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2599",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2599"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2599",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2599"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0100"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)"
},
{
"cve": "CVE-2018-2602",
"cwe": {
"id": "CWE-426",
"name": "Untrusted Search Path"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534525"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the I18n component of OpenJDK could use an untrusted search path when loading resource bundle classes. A local attacker could possibly use this flaw to execute arbitrary code as another local user by making their Java application load an attacker controlled class file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: loading of classes from untrusted locations (I18n, 8182601)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2602"
},
{
"category": "external",
"summary": "RHBZ#1534525",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534525"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2602",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2602"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2602",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2602"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0100"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: loading of classes from untrusted locations (I18n, 8182601)"
},
{
"cve": "CVE-2018-2603",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534553"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the Libraries component of OpenJDK failed to sufficiently limit the amount of memory allocated when reading DER encoded input. A remote attacker could possibly use this flaw to make a Java application use an excessive amount of memory if it parsed attacker supplied DER encoded input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2603"
},
{
"category": "external",
"summary": "RHBZ#1534553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2603",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2603"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2603",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2603"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0100"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)"
},
{
"cve": "CVE-2018-2618",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534762"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the key agreement implementations in the JCE component of OpenJDK did not guarantee sufficient strength of used keys to adequately protect generated shared secret. This could make it easier to break data encryption by attacking key agreement rather than the encryption using the negotiated secret.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient strength of key agreement (JCE, 8185292)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2618"
},
{
"category": "external",
"summary": "RHBZ#1534762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2618",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2618"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2618",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2618"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0100"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient strength of key agreement (JCE, 8185292)"
},
{
"cve": "CVE-2018-2629",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534625"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the JGSS component of OpenJDK failed to properly handle GSS context in the native GSS library wrapper in certain cases. A remote attacker could possibly make a Java application using JGSS to use a previously freed context.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: GSS context use-after-free (JGSS, 8186212)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2629"
},
{
"category": "external",
"summary": "RHBZ#1534625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534625"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2629",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2629"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2629",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2629"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0100"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: GSS context use-after-free (JGSS, 8186212)"
},
{
"cve": "CVE-2018-2633",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1535036"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the LDAPCertStore class in the JNDI component of OpenJDK failed to securely handle LDAP referrals. An attacker could possibly use this flaw to make it fetch attacker controlled certificate data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2633"
},
{
"category": "external",
"summary": "RHBZ#1535036",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535036"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2633",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2633"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2633",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2633"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0100"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)"
},
{
"cve": "CVE-2018-2634",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534943"
}
],
"notes": [
{
"category": "description",
"text": "The JGSS component of OpenJDK ignores the value of the javax.security.auth.useSubjectCredsOnly property when using HTTP/SPNEGO authentication and always uses global credentials. It was discovered that this could cause global credentials to be unexpectedly used by an untrusted Java application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2634"
},
{
"category": "external",
"summary": "RHBZ#1534943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2634",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2634"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2634",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2634"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0100"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)"
},
{
"cve": "CVE-2018-2637",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534970"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the JMX component of OpenJDK failed to properly set the deserialization filter for the SingleEntryRegistry in certain cases. A remote attacker could possibly use this flaw to bypass intended deserialization restrictions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2637"
},
{
"category": "external",
"summary": "RHBZ#1534970",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534970"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2637",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2637"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2637",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2637"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0100"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)"
},
{
"cve": "CVE-2018-2641",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534766"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: GTK library loading use-after-free (AWT, 8185325)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2641"
},
{
"category": "external",
"summary": "RHBZ#1534766",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534766"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2641",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2641"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2641",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2641"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0100"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: GTK library loading use-after-free (AWT, 8185325)"
},
{
"cve": "CVE-2018-2657",
"discovery_date": "2018-01-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1535353"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u171 and 7u161; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u181 and 7u171 (Serialization)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2657"
},
{
"category": "external",
"summary": "RHBZ#1535353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2657",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2657"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2657",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2657"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0100"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u181 and 7u171 (Serialization)"
},
{
"cve": "CVE-2018-2663",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534296"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2663"
},
{
"category": "external",
"summary": "RHBZ#1534296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534296"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2663",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2663"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2663",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2663"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0100"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)"
},
{
"cve": "CVE-2018-2677",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534288"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2677"
},
{
"category": "external",
"summary": "RHBZ#1534288",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534288"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2677",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2677"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2677",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2677"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0100"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)"
},
{
"cve": "CVE-2018-2678",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534263"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2678"
},
{
"category": "external",
"summary": "RHBZ#1534263",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534263"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2678",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2678"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2678",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2678"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0100"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)"
},
{
"cve": "CVE-2018-2783",
"discovery_date": "2018-04-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1569204"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2783"
},
{
"category": "external",
"summary": "RHBZ#1569204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0100"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-devel-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-javafx-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-jdbc-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-plugin-1:1.7.0.171-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.7.0-oracle-src-1:1.7.0.171-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)"
}
]
}
rhsa-2018:1975
Vulnerability from csaf_redhat
Published
2018-06-25 14:57
Modified
2025-08-04 11:59
Summary
Red Hat Security Advisory: java-1.8.0-ibm security update
Notes
Topic
An update for java-1.8.0-ibm is now available for Red Hat Satellite 5.8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 8 to version 8 SR5-FP15.
Security Fix(es):
* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)
* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)
* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)
* OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) (CVE-2018-2796)
* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)
* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)
* OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) (CVE-2018-2799)
* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)
* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-ibm is now available for Red Hat Satellite 5.8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 8 to version 8 SR5-FP15.\n\nSecurity Fix(es):\n\n* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)\n\n* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)\n\n* OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) (CVE-2018-2796)\n\n* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)\n\n* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)\n\n* OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) (CVE-2018-2799)\n\n* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)\n\n* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1975",
"url": "https://access.redhat.com/errata/RHSA-2018:1975"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1567126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126"
},
{
"category": "external",
"summary": "1567351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351"
},
{
"category": "external",
"summary": "1567542",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542"
},
{
"category": "external",
"summary": "1567543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543"
},
{
"category": "external",
"summary": "1567545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545"
},
{
"category": "external",
"summary": "1567546",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546"
},
{
"category": "external",
"summary": "1568163",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163"
},
{
"category": "external",
"summary": "1568515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515"
},
{
"category": "external",
"summary": "1569204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1975.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-ibm security update",
"tracking": {
"current_release_date": "2025-08-04T11:59:30+00:00",
"generator": {
"date": "2025-08-04T11:59:30+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:1975",
"initial_release_date": "2018-06-25T14:57:17+00:00",
"revision_history": [
{
"date": "2018-06-25T14:57:17+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-06-25T14:57:17+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T11:59:30+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 5.8 (RHEL v.6)",
"product": {
"name": "Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:network_satellite:5.8::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.2.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.2.el6?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.2.el6?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.2.el6?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"relates_to_product_reference": "6Server-Satellite58"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64 as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Server-Satellite58"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"relates_to_product_reference": "6Server-Satellite58"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64 as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Server-Satellite58"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2783",
"discovery_date": "2018-04-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1569204"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2783"
},
{
"category": "external",
"summary": "RHBZ#1569204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-25T14:57:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1975"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)"
},
{
"cve": "CVE-2018-2790",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1568515"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2790"
},
{
"category": "external",
"summary": "RHBZ#1568515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2790",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2790"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-25T14:57:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1975"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)"
},
{
"cve": "CVE-2018-2794",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567126"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2794"
},
{
"category": "external",
"summary": "RHBZ#1567126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2794",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2794"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-25T14:57:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1975"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)"
},
{
"cve": "CVE-2018-2795",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567351"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2795"
},
{
"category": "external",
"summary": "RHBZ#1567351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2795",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2795"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-25T14:57:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1975"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)"
},
{
"cve": "CVE-2018-2796",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567546"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2796"
},
{
"category": "external",
"summary": "RHBZ#1567546",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2796",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2796"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-25T14:57:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1975"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)"
},
{
"cve": "CVE-2018-2797",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567545"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2797"
},
{
"category": "external",
"summary": "RHBZ#1567545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2797",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-25T14:57:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1975"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)"
},
{
"cve": "CVE-2018-2798",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567543"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2798"
},
{
"category": "external",
"summary": "RHBZ#1567543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2798",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-25T14:57:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1975"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)"
},
{
"cve": "CVE-2018-2799",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567542"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2799"
},
{
"category": "external",
"summary": "RHBZ#1567542",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2799",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2799"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-25T14:57:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1975"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)"
},
{
"cve": "CVE-2018-2800",
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1568163"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2800"
},
{
"category": "external",
"summary": "RHBZ#1568163",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2800",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-06-25T14:57:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1975"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)"
}
]
}
rhsa-2018:1203
Vulnerability from csaf_redhat
Published
2018-04-23 17:15
Modified
2025-08-04 11:59
Summary
Red Hat Security Advisory: java-1.6.0-sun security update
Notes
Topic
An update for java-1.6.0-sun is now available for Oracle Java for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.
This update upgrades Oracle Java SE 6 to version 6 Update 191.
Security Fix(es):
* OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025) (CVE-2018-2814)
* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)
* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)
* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)
* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)
* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)
* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)
* OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757) (CVE-2018-2815)
* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.6.0-sun is now available for Oracle Java for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 6 to version 6 Update 191.\n\nSecurity Fix(es):\n\n* OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025) (CVE-2018-2814)\n\n* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)\n\n* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)\n\n* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)\n\n* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)\n\n* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)\n\n* OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757) (CVE-2018-2815)\n\n* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1203",
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1567121",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567121"
},
{
"category": "external",
"summary": "1567126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126"
},
{
"category": "external",
"summary": "1567351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351"
},
{
"category": "external",
"summary": "1567537",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567537"
},
{
"category": "external",
"summary": "1567543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543"
},
{
"category": "external",
"summary": "1567545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545"
},
{
"category": "external",
"summary": "1568163",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163"
},
{
"category": "external",
"summary": "1568515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515"
},
{
"category": "external",
"summary": "1569204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1203.json"
}
],
"title": "Red Hat Security Advisory: java-1.6.0-sun security update",
"tracking": {
"current_release_date": "2025-08-04T11:59:22+00:00",
"generator": {
"date": "2025-08-04T11:59:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:1203",
"initial_release_date": "2018-04-23T17:15:36+00:00",
"revision_history": [
{
"date": "2018-04-23T17:15:36+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-04-23T17:15:36+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T11:59:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Server 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
}
],
"category": "product_family",
"name": "Oracle Java for Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"product": {
"name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"product_id": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.191-1jpp.2.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"product": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"product_id": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.191-1jpp.2.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"product": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"product_id": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.191-1jpp.2.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"product": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"product_id": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.191-1jpp.2.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"product": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"product_id": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.191-1jpp.2.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"product": {
"name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"product_id": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.191-1jpp.2.el6?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"product": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"product_id": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.191-1jpp.2.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"product": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"product_id": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.191-1jpp.2.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"product": {
"name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"product_id": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.191-1jpp.2.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"product": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"product_id": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.191-1jpp.2.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"product": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"product_id": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.191-1jpp.2.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"product": {
"name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"product_id": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.191-1jpp.2.el6?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2783",
"discovery_date": "2018-04-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1569204"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2783"
},
{
"category": "external",
"summary": "RHBZ#1569204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-23T17:15:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)"
},
{
"cve": "CVE-2018-2790",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1568515"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2790"
},
{
"category": "external",
"summary": "RHBZ#1568515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2790",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2790"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-23T17:15:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)"
},
{
"cve": "CVE-2018-2794",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567126"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2794"
},
{
"category": "external",
"summary": "RHBZ#1567126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2794",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2794"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-23T17:15:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)"
},
{
"cve": "CVE-2018-2795",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567351"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2795"
},
{
"category": "external",
"summary": "RHBZ#1567351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2795",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2795"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-23T17:15:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)"
},
{
"cve": "CVE-2018-2797",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567545"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2797"
},
{
"category": "external",
"summary": "RHBZ#1567545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2797",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-23T17:15:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)"
},
{
"cve": "CVE-2018-2798",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567543"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2798"
},
{
"category": "external",
"summary": "RHBZ#1567543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2798",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-23T17:15:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)"
},
{
"cve": "CVE-2018-2800",
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1568163"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2800"
},
{
"category": "external",
"summary": "RHBZ#1568163",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2800",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-23T17:15:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)"
},
{
"cve": "CVE-2018-2814",
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567121"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2814"
},
{
"category": "external",
"summary": "RHBZ#1567121",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567121"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2814",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2814"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-23T17:15:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025)"
},
{
"cve": "CVE-2018-2815",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567537"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2815"
},
{
"category": "external",
"summary": "RHBZ#1567537",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567537"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2815",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2815"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2815",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2815"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-23T17:15:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Client-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Server-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-demo-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-devel-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-jdbc-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-plugin-1:1.6.0.191-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.9.Z:java-1.6.0-sun-src-1:1.6.0.191-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757)"
}
]
}
rhsa-2018:0099
Vulnerability from csaf_redhat
Published
2018-01-18 21:55
Modified
2025-08-04 11:58
Summary
Red Hat Security Advisory: java-1.8.0-oracle security update
Notes
Topic
An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Oracle Java SE version 8 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.
This update upgrades Oracle Java SE 8 to version 8 Update 161.
Security Fix(es):
* This update fixes multiple vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page listed in the References section. (CVE-2018-2579, CVE-2018-2581, CVE-2018-2582, CVE-2018-2588, CVE-2018-2599, CVE-2018-2602, CVE-2018-2603, CVE-2018-2618, CVE-2018-2627, CVE-2018-2629, CVE-2018-2633, CVE-2018-2634, CVE-2018-2637, CVE-2018-2638, CVE-2018-2639, CVE-2018-2641, CVE-2018-2663, CVE-2018-2677, CVE-2018-2678)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Oracle Java SE version 8 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 8 to version 8 Update 161.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page listed in the References section. (CVE-2018-2579, CVE-2018-2581, CVE-2018-2582, CVE-2018-2588, CVE-2018-2599, CVE-2018-2602, CVE-2018-2603, CVE-2018-2618, CVE-2018-2627, CVE-2018-2629, CVE-2018-2633, CVE-2018-2634, CVE-2018-2637, CVE-2018-2638, CVE-2018-2639, CVE-2018-2641, CVE-2018-2663, CVE-2018-2677, CVE-2018-2678)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:0099",
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/java/javase/8u161-relnotes-4021379.html",
"url": "http://www.oracle.com/technetwork/java/javase/8u161-relnotes-4021379.html"
},
{
"category": "external",
"summary": "1534263",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534263"
},
{
"category": "external",
"summary": "1534288",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534288"
},
{
"category": "external",
"summary": "1534296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534296"
},
{
"category": "external",
"summary": "1534298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534298"
},
{
"category": "external",
"summary": "1534299",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534299"
},
{
"category": "external",
"summary": "1534525",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534525"
},
{
"category": "external",
"summary": "1534543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534543"
},
{
"category": "external",
"summary": "1534553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534553"
},
{
"category": "external",
"summary": "1534625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534625"
},
{
"category": "external",
"summary": "1534762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534762"
},
{
"category": "external",
"summary": "1534766",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534766"
},
{
"category": "external",
"summary": "1534768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534768"
},
{
"category": "external",
"summary": "1534943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534943"
},
{
"category": "external",
"summary": "1534970",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534970"
},
{
"category": "external",
"summary": "1535036",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535036"
},
{
"category": "external",
"summary": "1535350",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535350"
},
{
"category": "external",
"summary": "1535351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535351"
},
{
"category": "external",
"summary": "1535352",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535352"
},
{
"category": "external",
"summary": "1535354",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535354"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0099.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-oracle security update",
"tracking": {
"current_release_date": "2025-08-04T11:58:29+00:00",
"generator": {
"date": "2025-08-04T11:58:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:0099",
"initial_release_date": "2018-01-18T21:55:29+00:00",
"revision_history": [
{
"date": "2018-01-18T21:55:29+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-01-18T21:55:29+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T11:58:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Server 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
}
],
"category": "product_family",
"name": "Oracle Java for Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"product": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"product_id": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-jdbc@1.8.0.161-1jpp.2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"product": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"product_id": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-devel@1.8.0.161-1jpp.2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"product": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"product_id": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-javafx@1.8.0.161-1jpp.2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"product": {
"name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"product_id": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-src@1.8.0.161-1jpp.2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"product": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"product_id": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-plugin@1.8.0.161-1jpp.2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"product": {
"name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"product_id": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle@1.8.0.161-1jpp.2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"product": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"product_id": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-jdbc@1.8.0.161-1jpp.1.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"product": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"product_id": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-javafx@1.8.0.161-1jpp.1.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"product": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"product_id": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-devel@1.8.0.161-1jpp.1.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"product": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"product_id": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-plugin@1.8.0.161-1jpp.1.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"product": {
"name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"product_id": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-src@1.8.0.161-1jpp.1.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"product": {
"name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"product_id": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle@1.8.0.161-1jpp.1.el6_9?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"product": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"product_id": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-jdbc@1.8.0.161-1jpp.1.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"product": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"product_id": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-javafx@1.8.0.161-1jpp.1.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"product": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"product_id": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-devel@1.8.0.161-1jpp.1.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"product": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"product_id": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-plugin@1.8.0.161-1jpp.1.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"product": {
"name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"product_id": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-src@1.8.0.161-1jpp.1.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"product": {
"name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"product_id": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle@1.8.0.161-1jpp.1.el6_9?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.4.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2579",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534298"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that multiple encryption key classes in the Libraries component of OpenJDK did not properly synchronize access to their internal data. This could possibly cause a multi-threaded Java application to apply weak encryption to data because of the use of a key that was zeroed out.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2579"
},
{
"category": "external",
"summary": "RHBZ#1534298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534298"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2579",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2579"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2579",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2579"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)"
},
{
"cve": "CVE-2018-2581",
"discovery_date": "2018-01-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1535354"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u161, 8u152 and 9.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 7u171, 8u161, and 9.0.4 (JavaFX)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2581"
},
{
"category": "external",
"summary": "RHBZ#1535354",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535354"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2581",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2581"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2581",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2581"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 7u171, 8u161, and 9.0.4 (JavaFX)"
},
{
"cve": "CVE-2018-2582",
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534768"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2582"
},
{
"category": "external",
"summary": "RHBZ#1534768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534768"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2582",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2582"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2582",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2582"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962)"
},
{
"cve": "CVE-2018-2588",
"cwe": {
"id": "CWE-90",
"name": "Improper Neutralization of Special Elements used in an LDAP Query (\u0027LDAP Injection\u0027)"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534299"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the LDAP component of OpenJDK failed to properly encode special characters in user names when adding them to an LDAP search query. A remote attacker could possibly use this flaw to manipulate LDAP queries performed by the LdapLoginModule class.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2588"
},
{
"category": "external",
"summary": "RHBZ#1534299",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534299"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2588",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2588"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2588",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2588"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)"
},
{
"cve": "CVE-2018-2599",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534543"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the DNS client implementation in the JNDI component of OpenJDK did not use random source ports when sending out DNS queries. This could make it easier for a remote attacker to spoof responses to those queries.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2599"
},
{
"category": "external",
"summary": "RHBZ#1534543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534543"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2599",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2599"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2599",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2599"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)"
},
{
"cve": "CVE-2018-2602",
"cwe": {
"id": "CWE-426",
"name": "Untrusted Search Path"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534525"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the I18n component of OpenJDK could use an untrusted search path when loading resource bundle classes. A local attacker could possibly use this flaw to execute arbitrary code as another local user by making their Java application load an attacker controlled class file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: loading of classes from untrusted locations (I18n, 8182601)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2602"
},
{
"category": "external",
"summary": "RHBZ#1534525",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534525"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2602",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2602"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2602",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2602"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: loading of classes from untrusted locations (I18n, 8182601)"
},
{
"cve": "CVE-2018-2603",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534553"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the Libraries component of OpenJDK failed to sufficiently limit the amount of memory allocated when reading DER encoded input. A remote attacker could possibly use this flaw to make a Java application use an excessive amount of memory if it parsed attacker supplied DER encoded input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2603"
},
{
"category": "external",
"summary": "RHBZ#1534553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2603",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2603"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2603",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2603"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)"
},
{
"cve": "CVE-2018-2618",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534762"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the key agreement implementations in the JCE component of OpenJDK did not guarantee sufficient strength of used keys to adequately protect generated shared secret. This could make it easier to break data encryption by attacking key agreement rather than the encryption using the negotiated secret.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient strength of key agreement (JCE, 8185292)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2618"
},
{
"category": "external",
"summary": "RHBZ#1534762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2618",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2618"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2618",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2618"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient strength of key agreement (JCE, 8185292)"
},
{
"cve": "CVE-2018-2627",
"discovery_date": "2018-01-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1535352"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to the Windows installer only. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Installer)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2627"
},
{
"category": "external",
"summary": "RHBZ#1535352",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535352"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2627",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2627"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2627",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2627"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Installer)"
},
{
"cve": "CVE-2018-2629",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534625"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the JGSS component of OpenJDK failed to properly handle GSS context in the native GSS library wrapper in certain cases. A remote attacker could possibly make a Java application using JGSS to use a previously freed context.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: GSS context use-after-free (JGSS, 8186212)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2629"
},
{
"category": "external",
"summary": "RHBZ#1534625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534625"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2629",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2629"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2629",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2629"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: GSS context use-after-free (JGSS, 8186212)"
},
{
"cve": "CVE-2018-2633",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1535036"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the LDAPCertStore class in the JNDI component of OpenJDK failed to securely handle LDAP referrals. An attacker could possibly use this flaw to make it fetch attacker controlled certificate data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2633"
},
{
"category": "external",
"summary": "RHBZ#1535036",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535036"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2633",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2633"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2633",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2633"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)"
},
{
"cve": "CVE-2018-2634",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534943"
}
],
"notes": [
{
"category": "description",
"text": "The JGSS component of OpenJDK ignores the value of the javax.security.auth.useSubjectCredsOnly property when using HTTP/SPNEGO authentication and always uses global credentials. It was discovered that this could cause global credentials to be unexpectedly used by an untrusted Java application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2634"
},
{
"category": "external",
"summary": "RHBZ#1534943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2634",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2634"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2634",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2634"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)"
},
{
"cve": "CVE-2018-2637",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534970"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the JMX component of OpenJDK failed to properly set the deserialization filter for the SingleEntryRegistry in certain cases. A remote attacker could possibly use this flaw to bypass intended deserialization restrictions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2637"
},
{
"category": "external",
"summary": "RHBZ#1534970",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534970"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2637",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2637"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2637",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2637"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)"
},
{
"cve": "CVE-2018-2638",
"discovery_date": "2018-01-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1535350"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2638"
},
{
"category": "external",
"summary": "RHBZ#1535350",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535350"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2638",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2638"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2638",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2638"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)"
},
{
"cve": "CVE-2018-2639",
"discovery_date": "2018-01-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1535351"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2639"
},
{
"category": "external",
"summary": "RHBZ#1535351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1535351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2639",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2639"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2639",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2639"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)"
},
{
"cve": "CVE-2018-2641",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534766"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: GTK library loading use-after-free (AWT, 8185325)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2641"
},
{
"category": "external",
"summary": "RHBZ#1534766",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534766"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2641",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2641"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2641",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2641"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: GTK library loading use-after-free (AWT, 8185325)"
},
{
"cve": "CVE-2018-2663",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534296"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2663"
},
{
"category": "external",
"summary": "RHBZ#1534296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534296"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2663",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2663"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2663",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2663"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)"
},
{
"cve": "CVE-2018-2677",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534288"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2677"
},
{
"category": "external",
"summary": "RHBZ#1534288",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534288"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2677",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2677"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2677",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2677"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)"
},
{
"cve": "CVE-2018-2678",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2017-12-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1534263"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2678"
},
{
"category": "external",
"summary": "RHBZ#1534263",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534263"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2678",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2678"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2678",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2678"
}
],
"release_date": "2018-01-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)"
},
{
"cve": "CVE-2018-2783",
"discovery_date": "2018-04-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1569204"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2783"
},
{
"category": "external",
"summary": "RHBZ#1569204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-01-18T21:55:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0099"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.i686",
"6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.1.el6_9.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-devel-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-javafx-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-jdbc-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-plugin-1:1.8.0.161-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.4.Z:java-1.8.0-oracle-src-1:1.8.0.161-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)"
}
]
}
rhsa-2018:1723
Vulnerability from csaf_redhat
Published
2018-05-24 19:01
Modified
2025-08-04 11:59
Summary
Red Hat Security Advisory: java-1.7.1-ibm security update
Notes
Topic
An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 7 to version 7R1 SR4-FP25.
Security Fix(es):
* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)
* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)
* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)
* OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) (CVE-2018-2796)
* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)
* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)
* OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) (CVE-2018-2799)
* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)
* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 7 to version 7R1 SR4-FP25.\n\nSecurity Fix(es):\n\n* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)\n\n* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)\n\n* OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) (CVE-2018-2796)\n\n* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)\n\n* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)\n\n* OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) (CVE-2018-2799)\n\n* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)\n\n* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1723",
"url": "https://access.redhat.com/errata/RHSA-2018:1723"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1567126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126"
},
{
"category": "external",
"summary": "1567351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351"
},
{
"category": "external",
"summary": "1567542",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542"
},
{
"category": "external",
"summary": "1567543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543"
},
{
"category": "external",
"summary": "1567545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545"
},
{
"category": "external",
"summary": "1567546",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546"
},
{
"category": "external",
"summary": "1568163",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163"
},
{
"category": "external",
"summary": "1568515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515"
},
{
"category": "external",
"summary": "1569204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1723.json"
}
],
"title": "Red Hat Security Advisory: java-1.7.1-ibm security update",
"tracking": {
"current_release_date": "2025-08-04T11:59:11+00:00",
"generator": {
"date": "2025-08-04T11:59:11+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:1723",
"initial_release_date": "2018-05-24T19:01:34+00:00",
"revision_history": [
{
"date": "2018-05-24T19:01:34+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-05-24T19:01:34+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T11:59:11+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.25-1jpp.3.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.25-1jpp.3.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.3.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.3.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.25-1jpp.3.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"product_id": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-plugin@1.7.1.4.25-1jpp.3.el7?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.25-1jpp.3.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.25-1jpp.3.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.3.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.25-1jpp.3.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.3.el7?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.25-1jpp.3.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.25-1jpp.3.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.3.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.25-1jpp.3.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.3.el7?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.25-1jpp.3.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.25-1jpp.3.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.3.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.25-1jpp.3.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.3.el7?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2783",
"discovery_date": "2018-04-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1569204"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2783"
},
{
"category": "external",
"summary": "RHBZ#1569204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T19:01:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1723"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)"
},
{
"cve": "CVE-2018-2790",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1568515"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2790"
},
{
"category": "external",
"summary": "RHBZ#1568515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2790",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2790"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T19:01:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1723"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)"
},
{
"cve": "CVE-2018-2794",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567126"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2794"
},
{
"category": "external",
"summary": "RHBZ#1567126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2794",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2794"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T19:01:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1723"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)"
},
{
"cve": "CVE-2018-2795",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567351"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2795"
},
{
"category": "external",
"summary": "RHBZ#1567351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2795",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2795"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T19:01:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1723"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)"
},
{
"cve": "CVE-2018-2796",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567546"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2796"
},
{
"category": "external",
"summary": "RHBZ#1567546",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2796",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2796"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T19:01:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1723"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)"
},
{
"cve": "CVE-2018-2797",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567545"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2797"
},
{
"category": "external",
"summary": "RHBZ#1567545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2797",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T19:01:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1723"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)"
},
{
"cve": "CVE-2018-2798",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567543"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2798"
},
{
"category": "external",
"summary": "RHBZ#1567543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2798",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T19:01:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1723"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)"
},
{
"cve": "CVE-2018-2799",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567542"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2799"
},
{
"category": "external",
"summary": "RHBZ#1567542",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2799",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2799"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T19:01:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1723"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)"
},
{
"cve": "CVE-2018-2800",
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1568163"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2800"
},
{
"category": "external",
"summary": "RHBZ#1568163",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2800",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T19:01:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1723"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.3.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.3.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)"
}
]
}
rhsa-2018:1724
Vulnerability from csaf_redhat
Published
2018-05-24 19:05
Modified
2025-08-04 11:59
Summary
Red Hat Security Advisory: java-1.7.1-ibm security update
Notes
Topic
An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 7 to version 7R1 SR4-FP25.
Security Fix(es):
* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)
* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)
* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)
* OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) (CVE-2018-2796)
* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)
* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)
* OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) (CVE-2018-2799)
* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)
* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 7 to version 7R1 SR4-FP25.\n\nSecurity Fix(es):\n\n* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)\n\n* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)\n\n* OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) (CVE-2018-2796)\n\n* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)\n\n* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)\n\n* OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) (CVE-2018-2799)\n\n* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)\n\n* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1724",
"url": "https://access.redhat.com/errata/RHSA-2018:1724"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1567126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126"
},
{
"category": "external",
"summary": "1567351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351"
},
{
"category": "external",
"summary": "1567542",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542"
},
{
"category": "external",
"summary": "1567543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543"
},
{
"category": "external",
"summary": "1567545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545"
},
{
"category": "external",
"summary": "1567546",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546"
},
{
"category": "external",
"summary": "1568163",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163"
},
{
"category": "external",
"summary": "1568515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515"
},
{
"category": "external",
"summary": "1569204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1724.json"
}
],
"title": "Red Hat Security Advisory: java-1.7.1-ibm security update",
"tracking": {
"current_release_date": "2025-08-04T11:59:18+00:00",
"generator": {
"date": "2025-08-04T11:59:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:1724",
"initial_release_date": "2018-05-24T19:05:12+00:00",
"revision_history": [
{
"date": "2018-05-24T19:05:12+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-05-24T19:05:12+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T11:59:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.2.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.25-1jpp.2.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.2.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.25-1jpp.2.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.25-1jpp.2.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"product": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"product_id": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-plugin@1.7.1.4.25-1jpp.2.el6_9?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.2.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.25-1jpp.2.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.2.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.25-1jpp.2.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.25-1jpp.2.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"product": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"product_id": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-plugin@1.7.1.4.25-1jpp.2.el6_9?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.2.el6_9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.25-1jpp.2.el6_9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.2.el6_9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.25-1jpp.2.el6_9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.25-1jpp.2.el6_9?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.25-1jpp.2.el6_9?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.25-1jpp.2.el6_9?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.25-1jpp.2.el6_9?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.25-1jpp.2.el6_9?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.25-1jpp.2.el6_9?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2783",
"discovery_date": "2018-04-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1569204"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2783"
},
{
"category": "external",
"summary": "RHBZ#1569204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T19:05:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1724"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)"
},
{
"cve": "CVE-2018-2790",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1568515"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2790"
},
{
"category": "external",
"summary": "RHBZ#1568515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2790",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2790"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T19:05:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1724"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)"
},
{
"cve": "CVE-2018-2794",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567126"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2794"
},
{
"category": "external",
"summary": "RHBZ#1567126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2794",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2794"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T19:05:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1724"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)"
},
{
"cve": "CVE-2018-2795",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567351"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2795"
},
{
"category": "external",
"summary": "RHBZ#1567351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2795",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2795"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T19:05:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1724"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)"
},
{
"cve": "CVE-2018-2796",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567546"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2796"
},
{
"category": "external",
"summary": "RHBZ#1567546",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2796",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2796"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T19:05:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1724"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)"
},
{
"cve": "CVE-2018-2797",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567545"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2797"
},
{
"category": "external",
"summary": "RHBZ#1567545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2797",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T19:05:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1724"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)"
},
{
"cve": "CVE-2018-2798",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567543"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2798"
},
{
"category": "external",
"summary": "RHBZ#1567543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2798",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T19:05:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1724"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)"
},
{
"cve": "CVE-2018-2799",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567542"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2799"
},
{
"category": "external",
"summary": "RHBZ#1567542",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2799",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2799"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T19:05:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1724"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)"
},
{
"cve": "CVE-2018-2800",
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1568163"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2800"
},
{
"category": "external",
"summary": "RHBZ#1568163",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2800",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T19:05:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1724"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-demo-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-devel-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-plugin-1:1.7.1.4.25-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.7.1-ibm-src-1:1.7.1.4.25-1jpp.2.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)"
}
]
}
rhsa-2018:1721
Vulnerability from csaf_redhat
Published
2018-05-24 18:53
Modified
2025-08-04 11:58
Summary
Red Hat Security Advisory: java-1.8.0-ibm security update
Notes
Topic
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 8 to version 8 SR5-FP15.
Security Fix(es):
* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)
* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)
* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)
* OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) (CVE-2018-2796)
* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)
* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)
* OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) (CVE-2018-2799)
* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)
* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 8 to version 8 SR5-FP15.\n\nSecurity Fix(es):\n\n* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)\n\n* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)\n\n* OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) (CVE-2018-2796)\n\n* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)\n\n* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)\n\n* OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) (CVE-2018-2799)\n\n* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)\n\n* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1721",
"url": "https://access.redhat.com/errata/RHSA-2018:1721"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1567126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126"
},
{
"category": "external",
"summary": "1567351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351"
},
{
"category": "external",
"summary": "1567542",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542"
},
{
"category": "external",
"summary": "1567543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543"
},
{
"category": "external",
"summary": "1567545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545"
},
{
"category": "external",
"summary": "1567546",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546"
},
{
"category": "external",
"summary": "1568163",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163"
},
{
"category": "external",
"summary": "1568515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515"
},
{
"category": "external",
"summary": "1569204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1721.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-ibm security update",
"tracking": {
"current_release_date": "2025-08-04T11:58:59+00:00",
"generator": {
"date": "2025-08-04T11:58:59+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:1721",
"initial_release_date": "2018-05-24T18:53:13+00:00",
"revision_history": [
{
"date": "2018-05-24T18:53:13+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-05-24T18:53:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T11:58:59+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.15-1jpp.5.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.5.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.5.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.15-1jpp.5.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.15-1jpp.5.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.15-1jpp.5.el7?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.15-1jpp.5.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.15-1jpp.5.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.5.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.5.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.15-1jpp.5.el7?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.15-1jpp.5.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.15-1jpp.5.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.5.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.5.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.15-1jpp.5.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.15-1jpp.5.el7?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.15-1jpp.5.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.15-1jpp.5.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.5.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.5.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.15-1jpp.5.el7?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2783",
"discovery_date": "2018-04-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1569204"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2783"
},
{
"category": "external",
"summary": "RHBZ#1569204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T18:53:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1721"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)"
},
{
"cve": "CVE-2018-2790",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1568515"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2790"
},
{
"category": "external",
"summary": "RHBZ#1568515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2790",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2790"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T18:53:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1721"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)"
},
{
"cve": "CVE-2018-2794",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567126"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2794"
},
{
"category": "external",
"summary": "RHBZ#1567126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2794",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2794"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T18:53:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1721"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)"
},
{
"cve": "CVE-2018-2795",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567351"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2795"
},
{
"category": "external",
"summary": "RHBZ#1567351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2795",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2795"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T18:53:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1721"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)"
},
{
"cve": "CVE-2018-2796",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567546"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2796"
},
{
"category": "external",
"summary": "RHBZ#1567546",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2796",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2796"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T18:53:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1721"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)"
},
{
"cve": "CVE-2018-2797",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567545"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2797"
},
{
"category": "external",
"summary": "RHBZ#1567545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2797",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T18:53:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1721"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)"
},
{
"cve": "CVE-2018-2798",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567543"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2798"
},
{
"category": "external",
"summary": "RHBZ#1567543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2798",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T18:53:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1721"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)"
},
{
"cve": "CVE-2018-2799",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567542"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2799"
},
{
"category": "external",
"summary": "RHBZ#1567542",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2799",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2799"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T18:53:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1721"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)"
},
{
"cve": "CVE-2018-2800",
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1568163"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2800"
},
{
"category": "external",
"summary": "RHBZ#1568163",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2800",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T18:53:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1721"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.5.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.5.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)"
}
]
}
rhsa-2018:1722
Vulnerability from csaf_redhat
Published
2018-05-24 18:57
Modified
2025-08-04 11:59
Summary
Red Hat Security Advisory: java-1.8.0-ibm security update
Notes
Topic
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 8 to version 8 SR5-FP15.
Security Fix(es):
* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)
* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)
* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)
* OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) (CVE-2018-2796)
* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)
* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)
* OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) (CVE-2018-2799)
* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)
* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 8 to version 8 SR5-FP15.\n\nSecurity Fix(es):\n\n* OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security) (CVE-2018-2783)\n\n* OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795)\n\n* OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981) (CVE-2018-2796)\n\n* OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985) (CVE-2018-2797)\n\n* OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989) (CVE-2018-2798)\n\n* OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993) (CVE-2018-2799)\n\n* OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833) (CVE-2018-2800)\n\n* OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) (CVE-2018-2790)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1722",
"url": "https://access.redhat.com/errata/RHSA-2018:1722"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1567126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126"
},
{
"category": "external",
"summary": "1567351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351"
},
{
"category": "external",
"summary": "1567542",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542"
},
{
"category": "external",
"summary": "1567543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543"
},
{
"category": "external",
"summary": "1567545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545"
},
{
"category": "external",
"summary": "1567546",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546"
},
{
"category": "external",
"summary": "1568163",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163"
},
{
"category": "external",
"summary": "1568515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515"
},
{
"category": "external",
"summary": "1569204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1722.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-ibm security update",
"tracking": {
"current_release_date": "2025-08-04T11:59:05+00:00",
"generator": {
"date": "2025-08-04T11:59:05+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:1722",
"initial_release_date": "2018-05-24T18:57:48+00:00",
"revision_history": [
{
"date": "2018-05-24T18:57:48+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-05-24T18:57:48+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T11:59:05+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.15-1jpp.2.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.15-1jpp.2.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"product": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.15-1jpp.2.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.15-1jpp.2.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.2.el6_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.2.el6_9?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.15-1jpp.2.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.15-1jpp.2.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"product": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.15-1jpp.2.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.15-1jpp.2.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.2.el6_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.2.el6_9?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.15-1jpp.2.el6_9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.15-1jpp.2.el6_9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.15-1jpp.2.el6_9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.2.el6_9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.2.el6_9?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.15-1jpp.2.el6_9?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.15-1jpp.2.el6_9?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.15-1jpp.2.el6_9?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.15-1jpp.2.el6_9?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.15-1jpp.2.el6_9?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2783",
"discovery_date": "2018-04-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1569204"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2783"
},
{
"category": "external",
"summary": "RHBZ#1569204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2783",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T18:57:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1722"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)"
},
{
"cve": "CVE-2018-2790",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1568515"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2790"
},
{
"category": "external",
"summary": "RHBZ#1568515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568515"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2790",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2790"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2790"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T18:57:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1722"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)"
},
{
"cve": "CVE-2018-2794",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567126"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2794"
},
{
"category": "external",
"summary": "RHBZ#1567126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567126"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2794",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2794"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2794"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T18:57:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1722"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)"
},
{
"cve": "CVE-2018-2795",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567351"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2795"
},
{
"category": "external",
"summary": "RHBZ#1567351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2795",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2795"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2795"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T18:57:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1722"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)"
},
{
"cve": "CVE-2018-2796",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567546"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2796"
},
{
"category": "external",
"summary": "RHBZ#1567546",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567546"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2796",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2796"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2796"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T18:57:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1722"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)"
},
{
"cve": "CVE-2018-2797",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567545"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2797"
},
{
"category": "external",
"summary": "RHBZ#1567545",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567545"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2797",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2797"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T18:57:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1722"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)"
},
{
"cve": "CVE-2018-2798",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567543"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2798"
},
{
"category": "external",
"summary": "RHBZ#1567543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567543"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2798",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2798"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T18:57:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1722"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)"
},
{
"cve": "CVE-2018-2799",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1567542"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2799"
},
{
"category": "external",
"summary": "RHBZ#1567542",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567542"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2799",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2799"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2799"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T18:57:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1722"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)"
},
{
"cve": "CVE-2018-2800",
"discovery_date": "2018-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1568163"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2800"
},
{
"category": "external",
"summary": "RHBZ#1568163",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568163"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2800",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2800"
}
],
"release_date": "2018-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-24T18:57:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1722"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Client-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6ComputeNode-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Server-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-demo-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-devel-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-plugin-1:1.8.0.5.15-1jpp.2.el6_9.x86_64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.i686",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.ppc64",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.s390x",
"6Workstation-Supplementary-6.9.z:java-1.8.0-ibm-src-1:1.8.0.5.15-1jpp.2.el6_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)"
}
]
}
suse-su-2018:2068-1
Vulnerability from csaf_suse
Published
2018-07-26 14:28
Modified
2018-07-26 14:28
Summary
Security update for java-1_8_0-ibm
Notes
Title of the patch
Security update for java-1_8_0-ibm
Description of the patch
IBM Java was updated to version 8.0.5.15 [bsc#1093311, bsc#1085449]
Security fixes:
- CVE-2018-2826 CVE-2018-2825 CVE-2018-2814 CVE-2018-2794
CVE-2018-2783 CVE-2018-2799 CVE-2018-2798 CVE-2018-2797
CVE-2018-2796 CVE-2018-2795 CVE-2018-2800 CVE-2018-2790
CVE-2018-1417
- Removed translations in the java-1_8_0-ibm-devel-32bit package
as they conflict with those in java-1_8_0-ibm-devel.
Patchnames
SUSE-SLE-Module-Legacy-15-2018-1398
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_8_0-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nIBM Java was updated to version 8.0.5.15 [bsc#1093311, bsc#1085449]\n\nSecurity fixes:\n\n- CVE-2018-2826 CVE-2018-2825 CVE-2018-2814 CVE-2018-2794\n CVE-2018-2783 CVE-2018-2799 CVE-2018-2798 CVE-2018-2797\n CVE-2018-2796 CVE-2018-2795 CVE-2018-2800 CVE-2018-2790\n CVE-2018-1417\n\n- Removed translations in the java-1_8_0-ibm-devel-32bit package\n as they conflict with those in java-1_8_0-ibm-devel.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Module-Legacy-15-2018-1398",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_2068-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:2068-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20182068-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:2068-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-July/004314.html"
},
{
"category": "self",
"summary": "SUSE Bug 1085449",
"url": "https://bugzilla.suse.com/1085449"
},
{
"category": "self",
"summary": "SUSE Bug 1093311",
"url": "https://bugzilla.suse.com/1093311"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1417 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1417/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2783 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2783/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2790 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2794 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2795 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2796 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2797 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2798 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2799 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2800 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2814 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2825 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2825/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2826 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2826/"
}
],
"title": "Security update for java-1_8_0-ibm",
"tracking": {
"current_release_date": "2018-07-26T14:28:02Z",
"generator": {
"date": "2018-07-26T14:28:02Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:2068-1",
"initial_release_date": "2018-07-26T14:28:02Z",
"revision_history": [
{
"date": "2018-07-26T14:28:02Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"product": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"product_id": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64",
"product": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64",
"product_id": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Legacy 15",
"product": {
"name": "SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-legacy:15"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1417",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1417"
}
],
"notes": [
{
"category": "general",
"text": "Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1417",
"url": "https://www.suse.com/security/cve/CVE-2018-1417"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-1417",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-07-26T14:28:02Z",
"details": "important"
}
],
"title": "CVE-2018-1417"
},
{
"cve": "CVE-2018-2783",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2783"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2783",
"url": "https://www.suse.com/security/cve/CVE-2018-2783"
},
{
"category": "external",
"summary": "SUSE Bug 1090022 for CVE-2018-2783",
"url": "https://bugzilla.suse.com/1090022"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2783",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-07-26T14:28:02Z",
"details": "important"
}
],
"title": "CVE-2018-2783"
},
{
"cve": "CVE-2018-2790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2790"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2790",
"url": "https://www.suse.com/security/cve/CVE-2018-2790"
},
{
"category": "external",
"summary": "SUSE Bug 1090023 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1090023"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1093311"
},
{
"category": "external",
"summary": "SUSE Bug 1101637 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1101637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-07-26T14:28:02Z",
"details": "low"
}
],
"title": "CVE-2018-2790"
},
{
"cve": "CVE-2018-2794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2794"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2794",
"url": "https://www.suse.com/security/cve/CVE-2018-2794"
},
{
"category": "external",
"summary": "SUSE Bug 1090024 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1090024"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-07-26T14:28:02Z",
"details": "moderate"
}
],
"title": "CVE-2018-2794"
},
{
"cve": "CVE-2018-2795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2795"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2795",
"url": "https://www.suse.com/security/cve/CVE-2018-2795"
},
{
"category": "external",
"summary": "SUSE Bug 1090025 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1090025"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-07-26T14:28:02Z",
"details": "moderate"
}
],
"title": "CVE-2018-2795"
},
{
"cve": "CVE-2018-2796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2796"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2796",
"url": "https://www.suse.com/security/cve/CVE-2018-2796"
},
{
"category": "external",
"summary": "SUSE Bug 1090026 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1090026"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-07-26T14:28:02Z",
"details": "moderate"
}
],
"title": "CVE-2018-2796"
},
{
"cve": "CVE-2018-2797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2797"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2797",
"url": "https://www.suse.com/security/cve/CVE-2018-2797"
},
{
"category": "external",
"summary": "SUSE Bug 1090027 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1090027"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-07-26T14:28:02Z",
"details": "moderate"
}
],
"title": "CVE-2018-2797"
},
{
"cve": "CVE-2018-2798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2798"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2798",
"url": "https://www.suse.com/security/cve/CVE-2018-2798"
},
{
"category": "external",
"summary": "SUSE Bug 1090028 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1090028"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-07-26T14:28:02Z",
"details": "moderate"
}
],
"title": "CVE-2018-2798"
},
{
"cve": "CVE-2018-2799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2799"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2799",
"url": "https://www.suse.com/security/cve/CVE-2018-2799"
},
{
"category": "external",
"summary": "SUSE Bug 1090029 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1090029"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-07-26T14:28:02Z",
"details": "moderate"
}
],
"title": "CVE-2018-2799"
},
{
"cve": "CVE-2018-2800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2800"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2800",
"url": "https://www.suse.com/security/cve/CVE-2018-2800"
},
{
"category": "external",
"summary": "SUSE Bug 1090030 for CVE-2018-2800",
"url": "https://bugzilla.suse.com/1090030"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2800",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-07-26T14:28:02Z",
"details": "moderate"
}
],
"title": "CVE-2018-2800"
},
{
"cve": "CVE-2018-2814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2814"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2814",
"url": "https://www.suse.com/security/cve/CVE-2018-2814"
},
{
"category": "external",
"summary": "SUSE Bug 1090032 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1090032"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-07-26T14:28:02Z",
"details": "important"
}
],
"title": "CVE-2018-2814"
},
{
"cve": "CVE-2018-2825",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2825"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2825",
"url": "https://www.suse.com/security/cve/CVE-2018-2825"
},
{
"category": "external",
"summary": "SUSE Bug 1090196 for CVE-2018-2825",
"url": "https://bugzilla.suse.com/1090196"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2825",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-07-26T14:28:02Z",
"details": "important"
}
],
"title": "CVE-2018-2825"
},
{
"cve": "CVE-2018-2826",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2826"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2826",
"url": "https://www.suse.com/security/cve/CVE-2018-2826"
},
{
"category": "external",
"summary": "SUSE Bug 1090197 for CVE-2018-2826",
"url": "https://bugzilla.suse.com/1090197"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2826",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.15-3.3.4.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.15-3.3.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-07-26T14:28:02Z",
"details": "important"
}
],
"title": "CVE-2018-2826"
}
]
}
suse-su-2018:1458-1
Vulnerability from csaf_suse
Published
2018-05-29 08:30
Modified
2018-05-29 08:30
Summary
Security update for java-1_7_0-ibm
Notes
Title of the patch
Security update for java-1_7_0-ibm
Description of the patch
This update for java-1_7_0-ibm fixes the following issues:
IBM Java was updated to 7.1.4.25 (bsc#1093311, bsc#1085449)
Security fixes:
- CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799
CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795
CVE-2018-2800 CVE-2018-2790 CVE-2018-1417
Patchnames
sleposp3-java-1_7_0-ibm-13628,slessp3-java-1_7_0-ibm-13628
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_7_0-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_7_0-ibm fixes the following issues:\n\nIBM Java was updated to 7.1.4.25 (bsc#1093311, bsc#1085449)\n\nSecurity fixes:\n\n- CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799\n CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795\n CVE-2018-2800 CVE-2018-2790 CVE-2018-1417\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sleposp3-java-1_7_0-ibm-13628,slessp3-java-1_7_0-ibm-13628",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_1458-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:1458-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181458-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:1458-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-May/004097.html"
},
{
"category": "self",
"summary": "SUSE Bug 1085449",
"url": "https://bugzilla.suse.com/1085449"
},
{
"category": "self",
"summary": "SUSE Bug 1093311",
"url": "https://bugzilla.suse.com/1093311"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1417 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1417/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2783 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2783/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2790 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2794 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2795 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2796 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2797 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2798 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2799 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2800 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2814 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2814/"
}
],
"title": "Security update for java-1_7_0-ibm",
"tracking": {
"current_release_date": "2018-05-29T08:30:56Z",
"generator": {
"date": "2018-05-29T08:30:56Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:1458-1",
"initial_release_date": "2018-05-29T08:30:56Z",
"revision_history": [
{
"date": "2018-05-29T08:30:56Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"product": {
"name": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"product_id": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"product": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"product_id": "java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"product": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"product_id": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"product": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"product_id": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"product": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"product_id": "java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"product": {
"name": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"product_id": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"product": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"product_id": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"product": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"product_id": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"product": {
"name": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"product_id": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"product": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"product_id": "java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"product": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"product_id": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"product": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"product_id": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"product": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"product_id": "java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-pos:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles_ltss:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:11:sp3:teradata"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586"
},
"product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586"
},
"product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586"
},
"product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586"
},
"product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586"
},
"product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586"
},
"product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1417",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1417"
}
],
"notes": [
{
"category": "general",
"text": "Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1417",
"url": "https://www.suse.com/security/cve/CVE-2018-1417"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-1417",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-29T08:30:56Z",
"details": "important"
}
],
"title": "CVE-2018-1417"
},
{
"cve": "CVE-2018-2783",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2783"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2783",
"url": "https://www.suse.com/security/cve/CVE-2018-2783"
},
{
"category": "external",
"summary": "SUSE Bug 1090022 for CVE-2018-2783",
"url": "https://bugzilla.suse.com/1090022"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2783",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-29T08:30:56Z",
"details": "important"
}
],
"title": "CVE-2018-2783"
},
{
"cve": "CVE-2018-2790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2790"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2790",
"url": "https://www.suse.com/security/cve/CVE-2018-2790"
},
{
"category": "external",
"summary": "SUSE Bug 1090023 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1090023"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1093311"
},
{
"category": "external",
"summary": "SUSE Bug 1101637 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1101637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-29T08:30:56Z",
"details": "low"
}
],
"title": "CVE-2018-2790"
},
{
"cve": "CVE-2018-2794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2794"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2794",
"url": "https://www.suse.com/security/cve/CVE-2018-2794"
},
{
"category": "external",
"summary": "SUSE Bug 1090024 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1090024"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-29T08:30:56Z",
"details": "moderate"
}
],
"title": "CVE-2018-2794"
},
{
"cve": "CVE-2018-2795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2795"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2795",
"url": "https://www.suse.com/security/cve/CVE-2018-2795"
},
{
"category": "external",
"summary": "SUSE Bug 1090025 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1090025"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-29T08:30:56Z",
"details": "moderate"
}
],
"title": "CVE-2018-2795"
},
{
"cve": "CVE-2018-2796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2796"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2796",
"url": "https://www.suse.com/security/cve/CVE-2018-2796"
},
{
"category": "external",
"summary": "SUSE Bug 1090026 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1090026"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-29T08:30:56Z",
"details": "moderate"
}
],
"title": "CVE-2018-2796"
},
{
"cve": "CVE-2018-2797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2797"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2797",
"url": "https://www.suse.com/security/cve/CVE-2018-2797"
},
{
"category": "external",
"summary": "SUSE Bug 1090027 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1090027"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-29T08:30:56Z",
"details": "moderate"
}
],
"title": "CVE-2018-2797"
},
{
"cve": "CVE-2018-2798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2798"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2798",
"url": "https://www.suse.com/security/cve/CVE-2018-2798"
},
{
"category": "external",
"summary": "SUSE Bug 1090028 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1090028"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-29T08:30:56Z",
"details": "moderate"
}
],
"title": "CVE-2018-2798"
},
{
"cve": "CVE-2018-2799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2799"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2799",
"url": "https://www.suse.com/security/cve/CVE-2018-2799"
},
{
"category": "external",
"summary": "SUSE Bug 1090029 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1090029"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-29T08:30:56Z",
"details": "moderate"
}
],
"title": "CVE-2018-2799"
},
{
"cve": "CVE-2018-2800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2800"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2800",
"url": "https://www.suse.com/security/cve/CVE-2018-2800"
},
{
"category": "external",
"summary": "SUSE Bug 1090030 for CVE-2018-2800",
"url": "https://bugzilla.suse.com/1090030"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2800",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-29T08:30:56Z",
"details": "moderate"
}
],
"title": "CVE-2018-2800"
},
{
"cve": "CVE-2018-2814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2814"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2814",
"url": "https://www.suse.com/security/cve/CVE-2018-2814"
},
{
"category": "external",
"summary": "SUSE Bug 1090032 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1090032"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.25-65.25.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.25-65.25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-29T08:30:56Z",
"details": "important"
}
],
"title": "CVE-2018-2814"
}
]
}
suse-su-2018:1738-2
Vulnerability from csaf_suse
Published
2018-10-18 12:45
Modified
2018-10-18 12:45
Summary
Security update for java-1_8_0-ibm
Notes
Title of the patch
Security update for java-1_8_0-ibm
Description of the patch
IBM Java was updated to version 8.0.5.15 [bsc#1093311, bsc#1085449]
Security fixes:
- CVE-2018-2826 CVE-2018-2825 CVE-2018-2814 CVE-2018-2794
CVE-2018-2783 CVE-2018-2799 CVE-2018-2798 CVE-2018-2797
CVE-2018-2796 CVE-2018-2795 CVE-2018-2800 CVE-2018-2790
CVE-2018-1417
- Removed translations in the java-1_8_0-ibm-devel-32bit package
as they conflict with those in java-1_8_0-ibm-devel.
Patchnames
SUSE-SLE-SERVER-12-SP2-BCL-2018-1176
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_8_0-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\n\nIBM Java was updated to version 8.0.5.15 [bsc#1093311, bsc#1085449]\n\nSecurity fixes:\n\n- CVE-2018-2826 CVE-2018-2825 CVE-2018-2814 CVE-2018-2794\n CVE-2018-2783 CVE-2018-2799 CVE-2018-2798 CVE-2018-2797\n CVE-2018-2796 CVE-2018-2795 CVE-2018-2800 CVE-2018-2790\n CVE-2018-1417\n\n- Removed translations in the java-1_8_0-ibm-devel-32bit package\n as they conflict with those in java-1_8_0-ibm-devel.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-SERVER-12-SP2-BCL-2018-1176",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_1738-2.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:1738-2",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181738-2/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:1738-2",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-October/004739.html"
},
{
"category": "self",
"summary": "SUSE Bug 1085449",
"url": "https://bugzilla.suse.com/1085449"
},
{
"category": "self",
"summary": "SUSE Bug 1093311",
"url": "https://bugzilla.suse.com/1093311"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1417 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1417/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2783 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2783/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2790 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2794 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2795 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2796 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2797 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2798 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2799 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2800 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2814 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2825 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2825/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2826 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2826/"
}
],
"title": "Security update for java-1_8_0-ibm",
"tracking": {
"current_release_date": "2018-10-18T12:45:52Z",
"generator": {
"date": "2018-10-18T12:45:52Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:1738-2",
"initial_release_date": "2018-10-18T12:45:52Z",
"revision_history": [
{
"date": "2018-10-18T12:45:52Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"product_id": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"product_id": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-bcl:12:sp2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1417",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1417"
}
],
"notes": [
{
"category": "general",
"text": "Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1417",
"url": "https://www.suse.com/security/cve/CVE-2018-1417"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-1417",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:52Z",
"details": "important"
}
],
"title": "CVE-2018-1417"
},
{
"cve": "CVE-2018-2783",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2783"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2783",
"url": "https://www.suse.com/security/cve/CVE-2018-2783"
},
{
"category": "external",
"summary": "SUSE Bug 1090022 for CVE-2018-2783",
"url": "https://bugzilla.suse.com/1090022"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2783",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:52Z",
"details": "important"
}
],
"title": "CVE-2018-2783"
},
{
"cve": "CVE-2018-2790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2790"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2790",
"url": "https://www.suse.com/security/cve/CVE-2018-2790"
},
{
"category": "external",
"summary": "SUSE Bug 1090023 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1090023"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1093311"
},
{
"category": "external",
"summary": "SUSE Bug 1101637 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1101637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:52Z",
"details": "low"
}
],
"title": "CVE-2018-2790"
},
{
"cve": "CVE-2018-2794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2794"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2794",
"url": "https://www.suse.com/security/cve/CVE-2018-2794"
},
{
"category": "external",
"summary": "SUSE Bug 1090024 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1090024"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:52Z",
"details": "moderate"
}
],
"title": "CVE-2018-2794"
},
{
"cve": "CVE-2018-2795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2795"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2795",
"url": "https://www.suse.com/security/cve/CVE-2018-2795"
},
{
"category": "external",
"summary": "SUSE Bug 1090025 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1090025"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:52Z",
"details": "moderate"
}
],
"title": "CVE-2018-2795"
},
{
"cve": "CVE-2018-2796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2796"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2796",
"url": "https://www.suse.com/security/cve/CVE-2018-2796"
},
{
"category": "external",
"summary": "SUSE Bug 1090026 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1090026"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:52Z",
"details": "moderate"
}
],
"title": "CVE-2018-2796"
},
{
"cve": "CVE-2018-2797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2797"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2797",
"url": "https://www.suse.com/security/cve/CVE-2018-2797"
},
{
"category": "external",
"summary": "SUSE Bug 1090027 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1090027"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:52Z",
"details": "moderate"
}
],
"title": "CVE-2018-2797"
},
{
"cve": "CVE-2018-2798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2798"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2798",
"url": "https://www.suse.com/security/cve/CVE-2018-2798"
},
{
"category": "external",
"summary": "SUSE Bug 1090028 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1090028"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:52Z",
"details": "moderate"
}
],
"title": "CVE-2018-2798"
},
{
"cve": "CVE-2018-2799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2799"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2799",
"url": "https://www.suse.com/security/cve/CVE-2018-2799"
},
{
"category": "external",
"summary": "SUSE Bug 1090029 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1090029"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:52Z",
"details": "moderate"
}
],
"title": "CVE-2018-2799"
},
{
"cve": "CVE-2018-2800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2800"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2800",
"url": "https://www.suse.com/security/cve/CVE-2018-2800"
},
{
"category": "external",
"summary": "SUSE Bug 1090030 for CVE-2018-2800",
"url": "https://bugzilla.suse.com/1090030"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2800",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:52Z",
"details": "moderate"
}
],
"title": "CVE-2018-2800"
},
{
"cve": "CVE-2018-2814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2814"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2814",
"url": "https://www.suse.com/security/cve/CVE-2018-2814"
},
{
"category": "external",
"summary": "SUSE Bug 1090032 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1090032"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:52Z",
"details": "important"
}
],
"title": "CVE-2018-2814"
},
{
"cve": "CVE-2018-2825",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2825"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2825",
"url": "https://www.suse.com/security/cve/CVE-2018-2825"
},
{
"category": "external",
"summary": "SUSE Bug 1090196 for CVE-2018-2825",
"url": "https://bugzilla.suse.com/1090196"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2825",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:52Z",
"details": "important"
}
],
"title": "CVE-2018-2825"
},
{
"cve": "CVE-2018-2826",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2826"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2826",
"url": "https://www.suse.com/security/cve/CVE-2018-2826"
},
{
"category": "external",
"summary": "SUSE Bug 1090197 for CVE-2018-2826",
"url": "https://bugzilla.suse.com/1090197"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2826",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:52Z",
"details": "important"
}
],
"title": "CVE-2018-2826"
}
]
}
suse-su-2018:1447-1
Vulnerability from csaf_suse
Published
2018-05-28 08:58
Modified
2018-05-28 08:58
Summary
Security update for java-1_7_1-ibm
Notes
Title of the patch
Security update for java-1_7_1-ibm
Description of the patch
IBM Java was updated to 7.1.4.25 [bsc#1093311, bsc#1085449]
Security fixes:
- CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799
CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795
CVE-2018-2800 CVE-2018-2790 CVE-2018-1417
Patchnames
sdksp4-java-1_7_1-ibm-13624,slessp4-java-1_7_1-ibm-13624
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_7_1-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\n\nIBM Java was updated to 7.1.4.25 [bsc#1093311, bsc#1085449]\n\nSecurity fixes:\n\n- CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799\n CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795\n CVE-2018-2800 CVE-2018-2790 CVE-2018-1417\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sdksp4-java-1_7_1-ibm-13624,slessp4-java-1_7_1-ibm-13624",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_1447-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:1447-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181447-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:1447-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-May/004090.html"
},
{
"category": "self",
"summary": "SUSE Bug 1085449",
"url": "https://bugzilla.suse.com/1085449"
},
{
"category": "self",
"summary": "SUSE Bug 1093311",
"url": "https://bugzilla.suse.com/1093311"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1417 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1417/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2783 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2783/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2790 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2794 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2795 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2796 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2797 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2798 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2799 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2800 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2814 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2814/"
}
],
"title": "Security update for java-1_7_1-ibm",
"tracking": {
"current_release_date": "2018-05-28T08:58:16Z",
"generator": {
"date": "2018-05-28T08:58:16Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:1447-1",
"initial_release_date": "2018-05-28T08:58:16Z",
"revision_history": [
{
"date": "2018-05-28T08:58:16Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"product": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"product_id": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"product": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"product_id": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64"
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"product_id": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"product_id": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/a:suse:sle-sdk:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:11:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1417",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1417"
}
],
"notes": [
{
"category": "general",
"text": "Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1417",
"url": "https://www.suse.com/security/cve/CVE-2018-1417"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-1417",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-28T08:58:16Z",
"details": "important"
}
],
"title": "CVE-2018-1417"
},
{
"cve": "CVE-2018-2783",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2783"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2783",
"url": "https://www.suse.com/security/cve/CVE-2018-2783"
},
{
"category": "external",
"summary": "SUSE Bug 1090022 for CVE-2018-2783",
"url": "https://bugzilla.suse.com/1090022"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2783",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-28T08:58:16Z",
"details": "important"
}
],
"title": "CVE-2018-2783"
},
{
"cve": "CVE-2018-2790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2790"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2790",
"url": "https://www.suse.com/security/cve/CVE-2018-2790"
},
{
"category": "external",
"summary": "SUSE Bug 1090023 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1090023"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1093311"
},
{
"category": "external",
"summary": "SUSE Bug 1101637 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1101637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-28T08:58:16Z",
"details": "low"
}
],
"title": "CVE-2018-2790"
},
{
"cve": "CVE-2018-2794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2794"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2794",
"url": "https://www.suse.com/security/cve/CVE-2018-2794"
},
{
"category": "external",
"summary": "SUSE Bug 1090024 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1090024"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-28T08:58:16Z",
"details": "moderate"
}
],
"title": "CVE-2018-2794"
},
{
"cve": "CVE-2018-2795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2795"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2795",
"url": "https://www.suse.com/security/cve/CVE-2018-2795"
},
{
"category": "external",
"summary": "SUSE Bug 1090025 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1090025"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-28T08:58:16Z",
"details": "moderate"
}
],
"title": "CVE-2018-2795"
},
{
"cve": "CVE-2018-2796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2796"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2796",
"url": "https://www.suse.com/security/cve/CVE-2018-2796"
},
{
"category": "external",
"summary": "SUSE Bug 1090026 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1090026"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-28T08:58:16Z",
"details": "moderate"
}
],
"title": "CVE-2018-2796"
},
{
"cve": "CVE-2018-2797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2797"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2797",
"url": "https://www.suse.com/security/cve/CVE-2018-2797"
},
{
"category": "external",
"summary": "SUSE Bug 1090027 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1090027"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-28T08:58:16Z",
"details": "moderate"
}
],
"title": "CVE-2018-2797"
},
{
"cve": "CVE-2018-2798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2798"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2798",
"url": "https://www.suse.com/security/cve/CVE-2018-2798"
},
{
"category": "external",
"summary": "SUSE Bug 1090028 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1090028"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-28T08:58:16Z",
"details": "moderate"
}
],
"title": "CVE-2018-2798"
},
{
"cve": "CVE-2018-2799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2799"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2799",
"url": "https://www.suse.com/security/cve/CVE-2018-2799"
},
{
"category": "external",
"summary": "SUSE Bug 1090029 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1090029"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-28T08:58:16Z",
"details": "moderate"
}
],
"title": "CVE-2018-2799"
},
{
"cve": "CVE-2018-2800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2800"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2800",
"url": "https://www.suse.com/security/cve/CVE-2018-2800"
},
{
"category": "external",
"summary": "SUSE Bug 1090030 for CVE-2018-2800",
"url": "https://bugzilla.suse.com/1090030"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2800",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-28T08:58:16Z",
"details": "moderate"
}
],
"title": "CVE-2018-2800"
},
{
"cve": "CVE-2018-2814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2814"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2814",
"url": "https://www.suse.com/security/cve/CVE-2018-2814"
},
{
"category": "external",
"summary": "SUSE Bug 1090032 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1090032"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-26.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.25-26.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-28T08:58:16Z",
"details": "important"
}
],
"title": "CVE-2018-2814"
}
]
}
suse-su-2018:1764-2
Vulnerability from csaf_suse
Published
2018-10-18 12:45
Modified
2018-10-18 12:45
Summary
Security update for java-1_7_1-ibm
Notes
Title of the patch
Security update for java-1_7_1-ibm
Description of the patch
IBM Java was updated to 7.1.4.25 [bsc#1093311, bsc#1085449]:
Security fixes:
- CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799
CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795
CVE-2018-2800 CVE-2018-2790 CVE-2018-1417
Patchnames
SUSE-SLE-SERVER-12-SP2-BCL-2018-1185
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_7_1-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\n\nIBM Java was updated to 7.1.4.25 [bsc#1093311, bsc#1085449]:\n\nSecurity fixes:\n\n- CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799\n CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795\n CVE-2018-2800 CVE-2018-2790 CVE-2018-1417\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-SERVER-12-SP2-BCL-2018-1185",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_1764-2.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:1764-2",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181764-2/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:1764-2",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-October/004701.html"
},
{
"category": "self",
"summary": "SUSE Bug 1085449",
"url": "https://bugzilla.suse.com/1085449"
},
{
"category": "self",
"summary": "SUSE Bug 1093311",
"url": "https://bugzilla.suse.com/1093311"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1417 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1417/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2783 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2783/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2790 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2794 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2795 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2796 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2797 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2798 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2799 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2800 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2814 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2814/"
}
],
"title": "Security update for java-1_7_1-ibm",
"tracking": {
"current_release_date": "2018-10-18T12:45:40Z",
"generator": {
"date": "2018-10-18T12:45:40Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:1764-2",
"initial_release_date": "2018-10-18T12:45:40Z",
"revision_history": [
{
"date": "2018-10-18T12:45:40Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"product_id": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"product_id": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-bcl:12:sp2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1417",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1417"
}
],
"notes": [
{
"category": "general",
"text": "Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1417",
"url": "https://www.suse.com/security/cve/CVE-2018-1417"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-1417",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:40Z",
"details": "important"
}
],
"title": "CVE-2018-1417"
},
{
"cve": "CVE-2018-2783",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2783"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2783",
"url": "https://www.suse.com/security/cve/CVE-2018-2783"
},
{
"category": "external",
"summary": "SUSE Bug 1090022 for CVE-2018-2783",
"url": "https://bugzilla.suse.com/1090022"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2783",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:40Z",
"details": "important"
}
],
"title": "CVE-2018-2783"
},
{
"cve": "CVE-2018-2790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2790"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2790",
"url": "https://www.suse.com/security/cve/CVE-2018-2790"
},
{
"category": "external",
"summary": "SUSE Bug 1090023 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1090023"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1093311"
},
{
"category": "external",
"summary": "SUSE Bug 1101637 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1101637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:40Z",
"details": "low"
}
],
"title": "CVE-2018-2790"
},
{
"cve": "CVE-2018-2794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2794"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2794",
"url": "https://www.suse.com/security/cve/CVE-2018-2794"
},
{
"category": "external",
"summary": "SUSE Bug 1090024 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1090024"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:40Z",
"details": "moderate"
}
],
"title": "CVE-2018-2794"
},
{
"cve": "CVE-2018-2795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2795"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2795",
"url": "https://www.suse.com/security/cve/CVE-2018-2795"
},
{
"category": "external",
"summary": "SUSE Bug 1090025 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1090025"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:40Z",
"details": "moderate"
}
],
"title": "CVE-2018-2795"
},
{
"cve": "CVE-2018-2796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2796"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2796",
"url": "https://www.suse.com/security/cve/CVE-2018-2796"
},
{
"category": "external",
"summary": "SUSE Bug 1090026 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1090026"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:40Z",
"details": "moderate"
}
],
"title": "CVE-2018-2796"
},
{
"cve": "CVE-2018-2797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2797"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2797",
"url": "https://www.suse.com/security/cve/CVE-2018-2797"
},
{
"category": "external",
"summary": "SUSE Bug 1090027 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1090027"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:40Z",
"details": "moderate"
}
],
"title": "CVE-2018-2797"
},
{
"cve": "CVE-2018-2798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2798"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2798",
"url": "https://www.suse.com/security/cve/CVE-2018-2798"
},
{
"category": "external",
"summary": "SUSE Bug 1090028 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1090028"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:40Z",
"details": "moderate"
}
],
"title": "CVE-2018-2798"
},
{
"cve": "CVE-2018-2799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2799"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2799",
"url": "https://www.suse.com/security/cve/CVE-2018-2799"
},
{
"category": "external",
"summary": "SUSE Bug 1090029 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1090029"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:40Z",
"details": "moderate"
}
],
"title": "CVE-2018-2799"
},
{
"cve": "CVE-2018-2800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2800"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2800",
"url": "https://www.suse.com/security/cve/CVE-2018-2800"
},
{
"category": "external",
"summary": "SUSE Bug 1090030 for CVE-2018-2800",
"url": "https://bugzilla.suse.com/1090030"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2800",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:40Z",
"details": "moderate"
}
],
"title": "CVE-2018-2800"
},
{
"cve": "CVE-2018-2814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2814"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2814",
"url": "https://www.suse.com/security/cve/CVE-2018-2814"
},
{
"category": "external",
"summary": "SUSE Bug 1090032 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1090032"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:45:40Z",
"details": "important"
}
],
"title": "CVE-2018-2814"
}
]
}
suse-su-2018:1764-1
Vulnerability from csaf_suse
Published
2018-06-20 12:42
Modified
2018-06-20 12:42
Summary
Security update for java-1_7_1-ibm
Notes
Title of the patch
Security update for java-1_7_1-ibm
Description of the patch
IBM Java was updated to 7.1.4.25 [bsc#1093311, bsc#1085449]:
Security fixes:
- CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799
CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795
CVE-2018-2800 CVE-2018-2790 CVE-2018-1417
Patchnames
SUSE-OpenStack-Cloud-7-2018-1185,SUSE-SLE-SAP-12-SP1-2018-1185,SUSE-SLE-SAP-12-SP2-2018-1185,SUSE-SLE-SDK-12-SP3-2018-1185,SUSE-SLE-SERVER-12-2018-1185,SUSE-SLE-SERVER-12-SP1-2018-1185,SUSE-SLE-SERVER-12-SP2-2018-1185,SUSE-SLE-SERVER-12-SP3-2018-1185,SUSE-Storage-4-2018-1185
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_7_1-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\n\nIBM Java was updated to 7.1.4.25 [bsc#1093311, bsc#1085449]:\n\nSecurity fixes:\n\n- CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799\n CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795\n CVE-2018-2800 CVE-2018-2790 CVE-2018-1417\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-OpenStack-Cloud-7-2018-1185,SUSE-SLE-SAP-12-SP1-2018-1185,SUSE-SLE-SAP-12-SP2-2018-1185,SUSE-SLE-SDK-12-SP3-2018-1185,SUSE-SLE-SERVER-12-2018-1185,SUSE-SLE-SERVER-12-SP1-2018-1185,SUSE-SLE-SERVER-12-SP2-2018-1185,SUSE-SLE-SERVER-12-SP3-2018-1185,SUSE-Storage-4-2018-1185",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_1764-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:1764-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181764-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:1764-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-June/004207.html"
},
{
"category": "self",
"summary": "SUSE Bug 1085449",
"url": "https://bugzilla.suse.com/1085449"
},
{
"category": "self",
"summary": "SUSE Bug 1093311",
"url": "https://bugzilla.suse.com/1093311"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1417 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1417/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2783 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2783/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2790 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2794 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2795 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2796 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2797 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2798 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2799 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2800 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2814 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2814/"
}
],
"title": "Security update for java-1_7_1-ibm",
"tracking": {
"current_release_date": "2018-06-20T12:42:35Z",
"generator": {
"date": "2018-06-20T12:42:35Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:1764-1",
"initial_release_date": "2018-06-20T12:42:35Z",
"revision_history": [
{
"date": "2018-06-20T12:42:35Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"product_id": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"product_id": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 7",
"product": {
"name": "SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud:7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 4",
"product": {
"name": "SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1417",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1417"
}
],
"notes": [
{
"category": "general",
"text": "Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1417",
"url": "https://www.suse.com/security/cve/CVE-2018-1417"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-1417",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-20T12:42:35Z",
"details": "important"
}
],
"title": "CVE-2018-1417"
},
{
"cve": "CVE-2018-2783",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2783"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2783",
"url": "https://www.suse.com/security/cve/CVE-2018-2783"
},
{
"category": "external",
"summary": "SUSE Bug 1090022 for CVE-2018-2783",
"url": "https://bugzilla.suse.com/1090022"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2783",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-20T12:42:35Z",
"details": "important"
}
],
"title": "CVE-2018-2783"
},
{
"cve": "CVE-2018-2790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2790"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2790",
"url": "https://www.suse.com/security/cve/CVE-2018-2790"
},
{
"category": "external",
"summary": "SUSE Bug 1090023 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1090023"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1093311"
},
{
"category": "external",
"summary": "SUSE Bug 1101637 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1101637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-20T12:42:35Z",
"details": "low"
}
],
"title": "CVE-2018-2790"
},
{
"cve": "CVE-2018-2794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2794"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2794",
"url": "https://www.suse.com/security/cve/CVE-2018-2794"
},
{
"category": "external",
"summary": "SUSE Bug 1090024 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1090024"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-20T12:42:35Z",
"details": "moderate"
}
],
"title": "CVE-2018-2794"
},
{
"cve": "CVE-2018-2795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2795"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2795",
"url": "https://www.suse.com/security/cve/CVE-2018-2795"
},
{
"category": "external",
"summary": "SUSE Bug 1090025 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1090025"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-20T12:42:35Z",
"details": "moderate"
}
],
"title": "CVE-2018-2795"
},
{
"cve": "CVE-2018-2796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2796"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2796",
"url": "https://www.suse.com/security/cve/CVE-2018-2796"
},
{
"category": "external",
"summary": "SUSE Bug 1090026 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1090026"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-20T12:42:35Z",
"details": "moderate"
}
],
"title": "CVE-2018-2796"
},
{
"cve": "CVE-2018-2797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2797"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2797",
"url": "https://www.suse.com/security/cve/CVE-2018-2797"
},
{
"category": "external",
"summary": "SUSE Bug 1090027 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1090027"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-20T12:42:35Z",
"details": "moderate"
}
],
"title": "CVE-2018-2797"
},
{
"cve": "CVE-2018-2798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2798"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2798",
"url": "https://www.suse.com/security/cve/CVE-2018-2798"
},
{
"category": "external",
"summary": "SUSE Bug 1090028 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1090028"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-20T12:42:35Z",
"details": "moderate"
}
],
"title": "CVE-2018-2798"
},
{
"cve": "CVE-2018-2799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2799"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2799",
"url": "https://www.suse.com/security/cve/CVE-2018-2799"
},
{
"category": "external",
"summary": "SUSE Bug 1090029 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1090029"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-20T12:42:35Z",
"details": "moderate"
}
],
"title": "CVE-2018-2799"
},
{
"cve": "CVE-2018-2800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2800"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2800",
"url": "https://www.suse.com/security/cve/CVE-2018-2800"
},
{
"category": "external",
"summary": "SUSE Bug 1090030 for CVE-2018-2800",
"url": "https://bugzilla.suse.com/1090030"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2800",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-20T12:42:35Z",
"details": "moderate"
}
],
"title": "CVE-2018-2800"
},
{
"cve": "CVE-2018-2814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2814"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2814",
"url": "https://www.suse.com/security/cve/CVE-2018-2814"
},
{
"category": "external",
"summary": "SUSE Bug 1090032 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1090032"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-20T12:42:35Z",
"details": "important"
}
],
"title": "CVE-2018-2814"
}
]
}
suse-su-2018:1738-1
Vulnerability from csaf_suse
Published
2018-06-19 13:49
Modified
2018-06-19 13:49
Summary
Security update for java-1_8_0-ibm
Notes
Title of the patch
Security update for java-1_8_0-ibm
Description of the patch
IBM Java was updated to version 8.0.5.15 [bsc#1093311, bsc#1085449]
Security fixes:
- CVE-2018-2826 CVE-2018-2825 CVE-2018-2814 CVE-2018-2794
CVE-2018-2783 CVE-2018-2799 CVE-2018-2798 CVE-2018-2797
CVE-2018-2796 CVE-2018-2795 CVE-2018-2800 CVE-2018-2790
CVE-2018-1417
- Removed translations in the java-1_8_0-ibm-devel-32bit package
as they conflict with those in java-1_8_0-ibm-devel.
Patchnames
SUSE-OpenStack-Cloud-7-2018-1176,SUSE-SLE-SAP-12-SP1-2018-1176,SUSE-SLE-SAP-12-SP2-2018-1176,SUSE-SLE-SDK-12-SP3-2018-1176,SUSE-SLE-SERVER-12-SP1-2018-1176,SUSE-SLE-SERVER-12-SP2-2018-1176,SUSE-SLE-SERVER-12-SP3-2018-1176,SUSE-Storage-4-2018-1176
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_8_0-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\n\nIBM Java was updated to version 8.0.5.15 [bsc#1093311, bsc#1085449]\n\nSecurity fixes:\n\n- CVE-2018-2826 CVE-2018-2825 CVE-2018-2814 CVE-2018-2794\n CVE-2018-2783 CVE-2018-2799 CVE-2018-2798 CVE-2018-2797\n CVE-2018-2796 CVE-2018-2795 CVE-2018-2800 CVE-2018-2790\n CVE-2018-1417\n\n- Removed translations in the java-1_8_0-ibm-devel-32bit package\n as they conflict with those in java-1_8_0-ibm-devel.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-OpenStack-Cloud-7-2018-1176,SUSE-SLE-SAP-12-SP1-2018-1176,SUSE-SLE-SAP-12-SP2-2018-1176,SUSE-SLE-SDK-12-SP3-2018-1176,SUSE-SLE-SERVER-12-SP1-2018-1176,SUSE-SLE-SERVER-12-SP2-2018-1176,SUSE-SLE-SERVER-12-SP3-2018-1176,SUSE-Storage-4-2018-1176",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_1738-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:1738-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181738-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:1738-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-June/004197.html"
},
{
"category": "self",
"summary": "SUSE Bug 1085449",
"url": "https://bugzilla.suse.com/1085449"
},
{
"category": "self",
"summary": "SUSE Bug 1093311",
"url": "https://bugzilla.suse.com/1093311"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1417 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1417/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2783 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2783/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2790 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2794 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2795 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2796 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2797 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2798 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2799 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2800 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2814 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2825 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2825/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2826 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2826/"
}
],
"title": "Security update for java-1_8_0-ibm",
"tracking": {
"current_release_date": "2018-06-19T13:49:40Z",
"generator": {
"date": "2018-06-19T13:49:40Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:1738-1",
"initial_release_date": "2018-06-19T13:49:40Z",
"revision_history": [
{
"date": "2018-06-19T13:49:40Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"product_id": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"product_id": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 7",
"product": {
"name": "SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud:7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 4",
"product": {
"name": "SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1417",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1417"
}
],
"notes": [
{
"category": "general",
"text": "Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1417",
"url": "https://www.suse.com/security/cve/CVE-2018-1417"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-1417",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-19T13:49:40Z",
"details": "important"
}
],
"title": "CVE-2018-1417"
},
{
"cve": "CVE-2018-2783",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2783"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2783",
"url": "https://www.suse.com/security/cve/CVE-2018-2783"
},
{
"category": "external",
"summary": "SUSE Bug 1090022 for CVE-2018-2783",
"url": "https://bugzilla.suse.com/1090022"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2783",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-19T13:49:40Z",
"details": "important"
}
],
"title": "CVE-2018-2783"
},
{
"cve": "CVE-2018-2790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2790"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2790",
"url": "https://www.suse.com/security/cve/CVE-2018-2790"
},
{
"category": "external",
"summary": "SUSE Bug 1090023 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1090023"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1093311"
},
{
"category": "external",
"summary": "SUSE Bug 1101637 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1101637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-19T13:49:40Z",
"details": "low"
}
],
"title": "CVE-2018-2790"
},
{
"cve": "CVE-2018-2794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2794"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2794",
"url": "https://www.suse.com/security/cve/CVE-2018-2794"
},
{
"category": "external",
"summary": "SUSE Bug 1090024 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1090024"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-19T13:49:40Z",
"details": "moderate"
}
],
"title": "CVE-2018-2794"
},
{
"cve": "CVE-2018-2795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2795"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2795",
"url": "https://www.suse.com/security/cve/CVE-2018-2795"
},
{
"category": "external",
"summary": "SUSE Bug 1090025 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1090025"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-19T13:49:40Z",
"details": "moderate"
}
],
"title": "CVE-2018-2795"
},
{
"cve": "CVE-2018-2796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2796"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2796",
"url": "https://www.suse.com/security/cve/CVE-2018-2796"
},
{
"category": "external",
"summary": "SUSE Bug 1090026 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1090026"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-19T13:49:40Z",
"details": "moderate"
}
],
"title": "CVE-2018-2796"
},
{
"cve": "CVE-2018-2797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2797"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2797",
"url": "https://www.suse.com/security/cve/CVE-2018-2797"
},
{
"category": "external",
"summary": "SUSE Bug 1090027 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1090027"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-19T13:49:40Z",
"details": "moderate"
}
],
"title": "CVE-2018-2797"
},
{
"cve": "CVE-2018-2798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2798"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2798",
"url": "https://www.suse.com/security/cve/CVE-2018-2798"
},
{
"category": "external",
"summary": "SUSE Bug 1090028 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1090028"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-19T13:49:40Z",
"details": "moderate"
}
],
"title": "CVE-2018-2798"
},
{
"cve": "CVE-2018-2799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2799"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2799",
"url": "https://www.suse.com/security/cve/CVE-2018-2799"
},
{
"category": "external",
"summary": "SUSE Bug 1090029 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1090029"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-19T13:49:40Z",
"details": "moderate"
}
],
"title": "CVE-2018-2799"
},
{
"cve": "CVE-2018-2800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2800"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2800",
"url": "https://www.suse.com/security/cve/CVE-2018-2800"
},
{
"category": "external",
"summary": "SUSE Bug 1090030 for CVE-2018-2800",
"url": "https://bugzilla.suse.com/1090030"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2800",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-19T13:49:40Z",
"details": "moderate"
}
],
"title": "CVE-2018-2800"
},
{
"cve": "CVE-2018-2814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2814"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2814",
"url": "https://www.suse.com/security/cve/CVE-2018-2814"
},
{
"category": "external",
"summary": "SUSE Bug 1090032 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1090032"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-19T13:49:40Z",
"details": "important"
}
],
"title": "CVE-2018-2814"
},
{
"cve": "CVE-2018-2825",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2825"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2825",
"url": "https://www.suse.com/security/cve/CVE-2018-2825"
},
{
"category": "external",
"summary": "SUSE Bug 1090196 for CVE-2018-2825",
"url": "https://bugzilla.suse.com/1090196"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2825",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-19T13:49:40Z",
"details": "important"
}
],
"title": "CVE-2018-2825"
},
{
"cve": "CVE-2018-2826",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2826"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2826",
"url": "https://www.suse.com/security/cve/CVE-2018-2826"
},
{
"category": "external",
"summary": "SUSE Bug 1090197 for CVE-2018-2826",
"url": "https://bugzilla.suse.com/1090197"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2826",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-06-19T13:49:40Z",
"details": "important"
}
],
"title": "CVE-2018-2826"
}
]
}
wid-sec-w-2023-0531
Vulnerability from csaf_certbund
Published
2019-02-25 23:00
Modified
2023-02-28 23:00
Summary
IBM SAN Volume Controller: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Die IBM SAN Volume Controller Software wird mit SAN Volume Controller Storage Engines ausgliefert und dient zur Steuerung und Verwaltung von IBM SANs. Zur Verwaltung bietet sie ein Webinterface.
IBM Storwize ist ein virtualisiertes Speichersystem für virtualisierte Serverumgebungen.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.
Betroffene Betriebssysteme
- Applicance
{
"document": {
"aggregate_severity": {
"text": "kritisch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Die IBM SAN Volume Controller Software wird mit SAN Volume Controller Storage Engines ausgliefert und dient zur Steuerung und Verwaltung von IBM SANs. Zur Verwaltung bietet sie ein Webinterface.\r\nIBM Storwize ist ein virtualisiertes Speichersystem f\u00fcr virtualisierte Serverumgebungen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 ausnutzen, um dadurch die Integrit\u00e4t, Vertraulichkeit und Verf\u00fcgbarkeit zu gef\u00e4hrden.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Applicance",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-0531 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2019/wid-sec-w-2023-0531.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-0531 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0531"
},
{
"category": "external",
"summary": "IBM Security Bulletin 872546 vom 2023-02-17",
"url": "http://www.ibm.com/support/pages/node/872546"
},
{
"category": "external",
"summary": "IBM Security Bulletins vom 2019-02-25",
"url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10872550"
},
{
"category": "external",
"summary": "IBM Security Bulletins vom 2019-02-25",
"url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10872546"
},
{
"category": "external",
"summary": "IBM Security Bulletins vom 2019-02-25",
"url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10872486"
},
{
"category": "external",
"summary": "IBM Security Bulletins vom 2019-02-25",
"url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10872364"
},
{
"category": "external",
"summary": "IBM Security Bulletins vom 2019-02-25",
"url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10872456"
},
{
"category": "external",
"summary": "IBM Security Bulletins vom 2019-02-25",
"url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10741135"
}
],
"source_lang": "en-US",
"title": "IBM SAN Volume Controller: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2023-02-28T23:00:00.000+00:00",
"generator": {
"date": "2024-08-15T17:45:55.866+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.5"
}
},
"id": "WID-SEC-W-2023-0531",
"initial_release_date": "2019-02-25T23:00:00.000+00:00",
"revision_history": [
{
"date": "2019-02-25T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2023-02-28T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von IBM aufgenommen"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "IBM FlashSystem \u003c 7.8.1.8",
"product": {
"name": "IBM FlashSystem \u003c 7.8.1.8",
"product_id": "T026586",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:flashsystem:7.8.1.8"
}
}
},
{
"category": "product_name",
"name": "IBM FlashSystem \u003c 8.1.3.4",
"product": {
"name": "IBM FlashSystem \u003c 8.1.3.4",
"product_id": "T026587",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:flashsystem:8.1.3.4"
}
}
},
{
"category": "product_name",
"name": "IBM FlashSystem \u003c 8.2.0.2",
"product": {
"name": "IBM FlashSystem \u003c 8.2.0.2",
"product_id": "T026588",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:flashsystem:8.2.0.2"
}
}
},
{
"category": "product_name",
"name": "IBM FlashSystem \u003c 8.2.1.0",
"product": {
"name": "IBM FlashSystem \u003c 8.2.1.0",
"product_id": "T026589",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:flashsystem:8.2.1.0"
}
}
}
],
"category": "product_name",
"name": "FlashSystem"
},
{
"branches": [
{
"category": "product_name",
"name": "IBM SAN Volume Controller",
"product": {
"name": "IBM SAN Volume Controller",
"product_id": "T002782",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:san_volume_controller:-"
}
}
},
{
"category": "product_name",
"name": "IBM SAN Volume Controller \u003c 7.8.1.8",
"product": {
"name": "IBM SAN Volume Controller \u003c 7.8.1.8",
"product_id": "T026578",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:san_volume_controller:7.8.1.8"
}
}
},
{
"category": "product_name",
"name": "IBM SAN Volume Controller \u003c 8.1.3.4",
"product": {
"name": "IBM SAN Volume Controller \u003c 8.1.3.4",
"product_id": "T026579",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:san_volume_controller:8.1.3.4"
}
}
},
{
"category": "product_name",
"name": "IBM SAN Volume Controller \u003c 8.2.0.2",
"product": {
"name": "IBM SAN Volume Controller \u003c 8.2.0.2",
"product_id": "T026580",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:san_volume_controller:8.2.0.2"
}
}
},
{
"category": "product_name",
"name": "IBM SAN Volume Controller \u003c 8.2.1.0",
"product": {
"name": "IBM SAN Volume Controller \u003c 8.2.1.0",
"product_id": "T026581",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:san_volume_controller:8.2.1.0"
}
}
}
],
"category": "product_name",
"name": "SAN Volume Controller"
},
{
"branches": [
{
"category": "product_name",
"name": "IBM Storwize \u003c 7.8.1.8",
"product": {
"name": "IBM Storwize \u003c 7.8.1.8",
"product_id": "T026582",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:storwize:7.8.1.8"
}
}
},
{
"category": "product_name",
"name": "IBM Storwize \u003c 8.1.3.4",
"product": {
"name": "IBM Storwize \u003c 8.1.3.4",
"product_id": "T026583",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:storwize:8.1.3.4"
}
}
},
{
"category": "product_name",
"name": "IBM Storwize \u003c 8.2.0.2",
"product": {
"name": "IBM Storwize \u003c 8.2.0.2",
"product_id": "T026584",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:storwize:8.2.0.2"
}
}
},
{
"category": "product_name",
"name": "IBM Storwize \u003c 8.2.1.0",
"product": {
"name": "IBM Storwize \u003c 8.2.1.0",
"product_id": "T026585",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:storwize:8.2.1.0"
}
}
}
],
"category": "product_name",
"name": "Storwize"
},
{
"category": "product_name",
"name": "IBM Storwize V3500",
"product": {
"name": "IBM Storwize V3500",
"product_id": "T002778",
"product_identification_helper": {
"cpe": "cpe:/h:ibm:storwize_v3500:-"
}
}
},
{
"category": "product_name",
"name": "IBM Storwize V3700",
"product": {
"name": "IBM Storwize V3700",
"product_id": "T002779",
"product_identification_helper": {
"cpe": "cpe:/h:ibm:storwize_v3700:-"
}
}
},
{
"category": "product_name",
"name": "IBM Storwize V5000",
"product": {
"name": "IBM Storwize V5000",
"product_id": "T002780",
"product_identification_helper": {
"cpe": "cpe:/h:ibm:storwize_v5000:-"
}
}
},
{
"category": "product_name",
"name": "IBM Storwize V7000",
"product": {
"name": "IBM Storwize V7000",
"product_id": "T000482",
"product_identification_helper": {
"cpe": "cpe:/h:ibm:storwize_v7000:-"
}
}
}
],
"category": "vendor",
"name": "IBM"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-17449",
"notes": [
{
"category": "description",
"text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T026581",
"T002780",
"T026582",
"T002782",
"T026580",
"T002778",
"T002779",
"T026578",
"T026589",
"T026579",
"T026587",
"T026588",
"T026585",
"T000482",
"T026586",
"T026583",
"T026584"
]
},
"release_date": "2019-02-25T23:00:00.000+00:00",
"title": "CVE-2017-17449"
},
{
"cve": "CVE-2017-17833",
"notes": [
{
"category": "description",
"text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T026581",
"T002780",
"T026582",
"T002782",
"T026580",
"T002778",
"T002779",
"T026578",
"T026589",
"T026579",
"T026587",
"T026588",
"T026585",
"T000482",
"T026586",
"T026583",
"T026584"
]
},
"release_date": "2019-02-25T23:00:00.000+00:00",
"title": "CVE-2017-17833"
},
{
"cve": "CVE-2017-18017",
"notes": [
{
"category": "description",
"text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T026581",
"T002780",
"T026582",
"T002782",
"T026580",
"T002778",
"T002779",
"T026578",
"T026589",
"T026579",
"T026587",
"T026588",
"T026585",
"T000482",
"T026586",
"T026583",
"T026584"
]
},
"release_date": "2019-02-25T23:00:00.000+00:00",
"title": "CVE-2017-18017"
},
{
"cve": "CVE-2018-11784",
"notes": [
{
"category": "description",
"text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T026581",
"T002780",
"T026582",
"T002782",
"T026580",
"T002778",
"T002779",
"T026578",
"T026589",
"T026579",
"T026587",
"T026588",
"T026585",
"T000482",
"T026586",
"T026583",
"T026584"
]
},
"release_date": "2019-02-25T23:00:00.000+00:00",
"title": "CVE-2018-11784"
},
{
"cve": "CVE-2018-12539",
"notes": [
{
"category": "description",
"text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T026581",
"T002780",
"T026582",
"T002782",
"T026580",
"T002778",
"T002779",
"T026578",
"T026589",
"T026579",
"T026587",
"T026588",
"T026585",
"T000482",
"T026586",
"T026583",
"T026584"
]
},
"release_date": "2019-02-25T23:00:00.000+00:00",
"title": "CVE-2018-12539"
},
{
"cve": "CVE-2018-1517",
"notes": [
{
"category": "description",
"text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T026581",
"T002780",
"T026582",
"T002782",
"T026580",
"T002778",
"T002779",
"T026578",
"T026589",
"T026579",
"T026587",
"T026588",
"T026585",
"T000482",
"T026586",
"T026583",
"T026584"
]
},
"release_date": "2019-02-25T23:00:00.000+00:00",
"title": "CVE-2018-1517"
},
{
"cve": "CVE-2018-1775",
"notes": [
{
"category": "description",
"text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T026581",
"T002780",
"T026582",
"T002782",
"T026580",
"T002778",
"T002779",
"T026578",
"T026589",
"T026579",
"T026587",
"T026588",
"T026585",
"T000482",
"T026586",
"T026583",
"T026584"
]
},
"release_date": "2019-02-25T23:00:00.000+00:00",
"title": "CVE-2018-1775"
},
{
"cve": "CVE-2018-2783",
"notes": [
{
"category": "description",
"text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T026581",
"T002780",
"T026582",
"T002782",
"T026580",
"T002778",
"T002779",
"T026578",
"T026589",
"T026579",
"T026587",
"T026588",
"T026585",
"T000482",
"T026586",
"T026583",
"T026584"
]
},
"release_date": "2019-02-25T23:00:00.000+00:00",
"title": "CVE-2018-2783"
},
{
"cve": "CVE-2018-5732",
"notes": [
{
"category": "description",
"text": "In IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000 und IBM Storwize V7000 existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstelle kann ein Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung und keine Benutzerinteraktion erforderlich. Die Bewertung der Schadensh\u00f6he erfolgt ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr die Produkte ist \"High\" f\u00fcr \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T026581",
"T002780",
"T026582",
"T002782",
"T026580",
"T002778",
"T002779",
"T026578",
"T026589",
"T026579",
"T026587",
"T026588",
"T026585",
"T000482",
"T026586",
"T026583",
"T026584"
]
},
"release_date": "2019-02-25T23:00:00.000+00:00",
"title": "CVE-2018-5732"
}
]
}
wid-sec-w-2023-1375
Vulnerability from csaf_certbund
Published
2018-04-17 22:00
Modified
2023-06-06 22:00
Summary
Oracle Java SE: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Die Java Platform, Standard Edition (SE) ist eine Sammlung von Java-APIs (JDK) und der Java Laufzeit Umgebung (JRE).
Java Standard Edition (SE) Embedded ist die Laufzeitumgebung für die Java-Plattform des US-Unternehmens Oracle Corporation für Embedded Systems.
Oracle JRockit JVM ist eine leistungsfähige Java Virtual Machine, die in Oracle Fusion Middleware enthalten ist.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.
Betroffene Betriebssysteme
- UNIX
- Linux
- Windows
- F5 Networks
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Die Java Platform, Standard Edition (SE) ist eine Sammlung von Java-APIs (JDK) und der Java Laufzeit Umgebung (JRE).\r\nJava Standard Edition (SE) Embedded ist die Laufzeitumgebung f\u00fcr die Java-Plattform des US-Unternehmens Oracle Corporation f\u00fcr Embedded Systems.\r\nOracle JRockit JVM ist eine leistungsf\u00e4hige Java Virtual Machine, die in Oracle Fusion Middleware enthalten ist.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit ausnutzen, um die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t zu gef\u00e4hrden.",
"title": "Angriff"
},
{
"category": "general",
"text": "- UNIX\n- Linux\n- Windows\n- F5 Networks",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-1375 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2018/wid-sec-w-2023-1375.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-1375 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1375"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7001787 vom 2023-06-07",
"url": "https://www.ibm.com/support/pages/node/7001787"
},
{
"category": "external",
"summary": "Oracle Critical Patch Update Advisory - April 2018 vom 2018-04-17",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA"
},
{
"category": "external",
"summary": "NetApp Security Advisory NTAP-20180419-0001 vom 2018-04-20",
"url": "https://security.netapp.com/advisory/ntap-20180419-0001/"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2018-1191 vom 2018-04-20",
"url": "http://linux.oracle.com/errata/ELSA-2018-1191.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2018-1188 vom 2018-04-20",
"url": "http://linux.oracle.com/errata/ELSA-2018-1188.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1201 vom 2018-04-24",
"url": "https://access.redhat.com/errata/RHSA-2018:1201"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1204 vom 2018-04-24",
"url": "https://access.redhat.com/errata/RHSA-2018:1204"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1206 vom 2018-04-24",
"url": "https://access.redhat.com/errata/RHSA-2018:1206"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1202 vom 2018-04-24",
"url": "https://access.redhat.com/errata/RHSA-2018:1202"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1205 vom 2018-04-24",
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1203 vom 2018-04-24",
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-4185 vom 2018-04-29",
"url": "https://www.debian.org/security/2018/dsa-4185"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2018-1270 vom 2018-05-01",
"url": "http://linux.oracle.com/errata/ELSA-2018-1270.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1270 vom 2018-04-30",
"url": "https://access.redhat.com/errata/RHSA-2018:1270"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1188",
"url": "https://access.redhat.com/errata/RHSA-2018:1188"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2018-1278 vom 2018-05-03",
"url": "http://linux.oracle.com/errata/ELSA-2018-1278.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1278 vom 2018-05-03",
"url": "https://access.redhat.com/errata/RHSA-2018:1278"
},
{
"category": "external",
"summary": "CentOS Security Advisory CESA-2018:1270 vom 2018-05-02",
"url": "http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2018-1270-Important-CentOS-6-java-1-7-0-openjdk-Security-Update-tp4645024.html"
},
{
"category": "external",
"summary": "McAfee Security Bulletin",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10234"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1724 vom 2018-05-24",
"url": "http://rhn.redhat.com/errata/RHSA-2018-1724.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1723 vom 2018-05-24",
"url": "http://rhn.redhat.com/errata/RHSA-2018-1723.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1722 vom 2018-05-24",
"url": "http://rhn.redhat.com/errata/RHSA-2018-1722.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1721 vom 2018-05-24",
"url": "http://rhn.redhat.com/errata/RHSA-2018-1721.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:1447-1 vom 2018-05-29",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181447-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:1458-1 vom 2018-05-29",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181458-1.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-4225 vom 2018-06-11",
"url": "https://www.debian.org/security/2018/dsa-4225"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:1692-1 vom 2018-06-14",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181692-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:1690-1 vom 2018-06-14",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181690-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:1738-1 vom 2018-06-20",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181738-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:1764-1 vom 2018-06-20",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181764-1.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1975 vom 2018-06-25",
"url": "http://rhn.redhat.com/errata/RHSA-2018-1975.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1974 vom 2018-06-25",
"url": "http://rhn.redhat.com/errata/RHSA-2018-1974.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:1938-1 vom 2018-07-13",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181938-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:1938-2 vom 2018-07-13",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181938-2.html"
},
{
"category": "external",
"summary": "F5 Security Advisory K15217245 vom 2018-09-19",
"url": "https://support.f5.com/csp/article/K15217245"
},
{
"category": "external",
"summary": "F5 Security Advisory K44923228 Stand 2018-09.20",
"url": "https://support.f5.com/csp/article/K44923228"
},
{
"category": "external",
"summary": "F5 Security Advisory K33924005 Stand 2018-09.20",
"url": "https://support.f5.com/csp/article/K33924005"
},
{
"category": "external",
"summary": "F5 Security Advisory K70321874 vom 2018-12-18",
"url": "https://support.f5.com/csp/article/K70321874"
},
{
"category": "external",
"summary": "Dell/EMC Knowledge Base Article: 000529947",
"url": "https://support.emc.com/kb/529947"
}
],
"source_lang": "en-US",
"title": "Oracle Java SE: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2023-06-06T22:00:00.000+00:00",
"generator": {
"date": "2024-08-15T17:51:55.247+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.5"
}
},
"id": "WID-SEC-W-2023-1375",
"initial_release_date": "2018-04-17T22:00:00.000+00:00",
"revision_history": [
{
"date": "2018-04-17T22:00:00.000+00:00",
"number": "1",
"summary": "Initial Release"
},
{
"date": "2018-04-17T22:00:00.000+00:00",
"number": "2",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-04-19T22:00:00.000+00:00",
"number": "3",
"summary": "New remediations available"
},
{
"date": "2018-04-19T22:00:00.000+00:00",
"number": "4",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-04-23T22:00:00.000+00:00",
"number": "5",
"summary": "New remediations available"
},
{
"date": "2018-04-29T22:00:00.000+00:00",
"number": "6",
"summary": "New remediations available"
},
{
"date": "2018-05-01T22:00:00.000+00:00",
"number": "7",
"summary": "New remediations available"
},
{
"date": "2018-05-01T22:00:00.000+00:00",
"number": "8",
"summary": "New remediations available"
},
{
"date": "2018-05-02T22:00:00.000+00:00",
"number": "9",
"summary": "New remediations available"
},
{
"date": "2018-05-02T22:00:00.000+00:00",
"number": "10",
"summary": "New remediations available"
},
{
"date": "2018-05-07T22:00:00.000+00:00",
"number": "11",
"summary": "New remediations available"
},
{
"date": "2018-05-07T22:00:00.000+00:00",
"number": "12",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-05-24T22:00:00.000+00:00",
"number": "13",
"summary": "New remediations available"
},
{
"date": "2018-05-28T22:00:00.000+00:00",
"number": "14",
"summary": "New remediations available"
},
{
"date": "2018-05-29T22:00:00.000+00:00",
"number": "15",
"summary": "New remediations available"
},
{
"date": "2018-06-11T22:00:00.000+00:00",
"number": "16",
"summary": "New remediations available"
},
{
"date": "2018-06-14T22:00:00.000+00:00",
"number": "17",
"summary": "New remediations available"
},
{
"date": "2018-06-19T22:00:00.000+00:00",
"number": "18",
"summary": "New remediations available"
},
{
"date": "2018-06-20T22:00:00.000+00:00",
"number": "19",
"summary": "New remediations available"
},
{
"date": "2018-06-25T22:00:00.000+00:00",
"number": "20",
"summary": "New remediations available"
},
{
"date": "2018-07-12T22:00:00.000+00:00",
"number": "21",
"summary": "New remediations available"
},
{
"date": "2018-09-19T22:00:00.000+00:00",
"number": "22",
"summary": "New remediations available"
},
{
"date": "2018-09-19T22:00:00.000+00:00",
"number": "23",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-09-19T22:00:00.000+00:00",
"number": "24",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-12-18T23:00:00.000+00:00",
"number": "25",
"summary": "New remediations available"
},
{
"date": "2019-01-30T23:00:00.000+00:00",
"number": "26",
"summary": "Neue Updates von EMC aufgenommen"
},
{
"date": "2023-06-06T22:00:00.000+00:00",
"number": "27",
"summary": "Neue Updates von IBM aufgenommen"
}
],
"status": "final",
"version": "27"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"category": "product_name",
"name": "EMC VNX2",
"product": {
"name": "EMC VNX2",
"product_id": "T004667",
"product_identification_helper": {
"cpe": "cpe:/h:emc:vnx:-"
}
}
}
],
"category": "vendor",
"name": "EMC"
},
{
"branches": [
{
"category": "product_name",
"name": "F5 BIG-IP",
"product": {
"name": "F5 BIG-IP",
"product_id": "T001663",
"product_identification_helper": {
"cpe": "cpe:/a:f5:big-ip:-"
}
}
},
{
"category": "product_name",
"name": "F5 Enterprise Manager",
"product": {
"name": "F5 Enterprise Manager",
"product_id": "T000125",
"product_identification_helper": {
"cpe": "cpe:/a:f5:enterprise_manager:-"
}
}
}
],
"category": "vendor",
"name": "F5"
},
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "IBM Operational Decision Manager 8.10.x",
"product": {
"name": "IBM Operational Decision Manager 8.10.x",
"product_id": "T027827",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:operational_decision_manager:8.10.x"
}
}
},
{
"category": "product_name",
"name": "IBM Operational Decision Manager 8.11.x",
"product": {
"name": "IBM Operational Decision Manager 8.11.x",
"product_id": "T027828",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:operational_decision_manager:8.11.x"
}
}
}
],
"category": "product_name",
"name": "Operational Decision Manager"
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "McAfee ePolicy Orchestrator 5.3.1",
"product": {
"name": "McAfee ePolicy Orchestrator 5.3.1",
"product_id": "318532",
"product_identification_helper": {
"cpe": "cpe:/a:mcafee:epolicy_orchestrator:5.3.1"
}
}
},
{
"category": "product_name",
"name": "McAfee ePolicy Orchestrator 5.3.2",
"product": {
"name": "McAfee ePolicy Orchestrator 5.3.2",
"product_id": "T009959",
"product_identification_helper": {
"cpe": "cpe:/a:mcafee:epolicy_orchestrator:5.3.2"
}
}
},
{
"category": "product_name",
"name": "McAfee ePolicy Orchestrator 5.9.0",
"product": {
"name": "McAfee ePolicy Orchestrator 5.9.0",
"product_id": "T009960",
"product_identification_helper": {
"cpe": "cpe:/a:mcafee:epolicy_orchestrator:5.9.0"
}
}
},
{
"category": "product_name",
"name": "McAfee ePolicy Orchestrator 5.3.3",
"product": {
"name": "McAfee ePolicy Orchestrator 5.3.3",
"product_id": "T012223",
"product_identification_helper": {
"cpe": "cpe:/a:mcafee:epolicy_orchestrator:5.3.3"
}
}
},
{
"category": "product_name",
"name": "McAfee ePolicy Orchestrator 5.3.0",
"product": {
"name": "McAfee ePolicy Orchestrator 5.3.0",
"product_id": "T012224",
"product_identification_helper": {
"cpe": "cpe:/a:mcafee:epolicy_orchestrator:5.3.0"
}
}
},
{
"category": "product_name",
"name": "McAfee ePolicy Orchestrator 5.9.1",
"product": {
"name": "McAfee ePolicy Orchestrator 5.9.1",
"product_id": "T012225",
"product_identification_helper": {
"cpe": "cpe:/a:mcafee:epolicy_orchestrator:5.9.1"
}
}
}
],
"category": "product_name",
"name": "ePolicy Orchestrator"
}
],
"category": "vendor",
"name": "McAfee"
},
{
"branches": [
{
"category": "product_name",
"name": "NetApp OnCommand Unified Manager 7.2",
"product": {
"name": "NetApp OnCommand Unified Manager 7.2",
"product_id": "T011994",
"product_identification_helper": {
"cpe": "cpe:/a:netapp:oncommand_unified_manager:7.2"
}
}
}
],
"category": "vendor",
"name": "NetApp"
},
{
"branches": [
{
"category": "product_name",
"name": "Open Source CentOS",
"product": {
"name": "Open Source CentOS",
"product_id": "1727",
"product_identification_helper": {
"cpe": "cpe:/o:centos:centos:-"
}
}
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle JRockit R28.3.17",
"product": {
"name": "Oracle JRockit R28.3.17",
"product_id": "T012140",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:jrockit:r28.3.17"
}
}
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Java SE 7u161",
"product": {
"name": "Oracle Java SE 7u161",
"product_id": "T011621",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:7u161"
}
}
},
{
"category": "product_name",
"name": "Oracle Java SE 8u152",
"product": {
"name": "Oracle Java SE 8u152",
"product_id": "T011623",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:8u152"
}
}
},
{
"category": "product_name",
"name": "Oracle Java SE 10",
"product": {
"name": "Oracle Java SE 10",
"product_id": "T012136",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:10"
}
}
},
{
"category": "product_name",
"name": "Oracle Java SE 8u162",
"product": {
"name": "Oracle Java SE 8u162",
"product_id": "T012137",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:8u162"
}
}
},
{
"category": "product_name",
"name": "Oracle Java SE 7u171",
"product": {
"name": "Oracle Java SE 7u171",
"product_id": "T012138",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:7u171"
}
}
},
{
"category": "product_name",
"name": "Oracle Java SE 6u181",
"product": {
"name": "Oracle Java SE 6u181",
"product_id": "T012139",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:6u181"
}
}
}
],
"category": "product_name",
"name": "Java SE"
},
{
"category": "product_name",
"name": "Oracle Java SE Embedded 8u161",
"product": {
"name": "Oracle Java SE Embedded 8u161",
"product_id": "T002043",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se_embedded:7.0:update_40"
}
}
},
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2783",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2783"
},
{
"cve": "CVE-2018-2790",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2790"
},
{
"cve": "CVE-2018-2794",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2794"
},
{
"cve": "CVE-2018-2795",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2795"
},
{
"cve": "CVE-2018-2796",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2796"
},
{
"cve": "CVE-2018-2797",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2797"
},
{
"cve": "CVE-2018-2798",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2798"
},
{
"cve": "CVE-2018-2799",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2799"
},
{
"cve": "CVE-2018-2800",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2800"
},
{
"cve": "CVE-2018-2811",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2811"
},
{
"cve": "CVE-2018-2814",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2814"
},
{
"cve": "CVE-2018-2815",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2815"
},
{
"cve": "CVE-2018-2825",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2825"
},
{
"cve": "CVE-2018-2826",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2826"
}
]
}
gsd-2018-2783
Vulnerability from gsd
Modified
2023-12-13 01:22
Details
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2018-2783",
"description": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"id": "GSD-2018-2783",
"references": [
"https://www.suse.com/security/cve/CVE-2018-2783.html",
"https://access.redhat.com/errata/RHSA-2018:1975",
"https://access.redhat.com/errata/RHSA-2018:1974",
"https://access.redhat.com/errata/RHSA-2018:1724",
"https://access.redhat.com/errata/RHSA-2018:1723",
"https://access.redhat.com/errata/RHSA-2018:1722",
"https://access.redhat.com/errata/RHSA-2018:1721",
"https://access.redhat.com/errata/RHSA-2018:1205",
"https://access.redhat.com/errata/RHSA-2018:1203",
"https://access.redhat.com/errata/RHSA-2018:0100",
"https://access.redhat.com/errata/RHSA-2018:0099",
"https://ubuntu.com/security/CVE-2018-2783"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2018-2783"
],
"details": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"id": "GSD-2018-2783",
"modified": "2023-12-13T01:22:32.157649Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert_us@oracle.com",
"ID": "CVE-2018-2783",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2018:1975",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1975"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us",
"refsource": "CONFIRM",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us"
},
{
"name": "1040697",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1040697"
},
{
"name": "RHSA-2018:1724",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1724"
},
{
"name": "RHSA-2018:1203",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
},
{
"name": "USN-3644-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3644-1/"
},
{
"name": "RHSA-2018:1723",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1723"
},
{
"name": "https://security.netapp.com/advisory/ntap-20180419-0001/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20180419-0001/"
},
{
"name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
"refsource": "CONFIRM",
"url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
},
{
"name": "RHSA-2018:1722",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1722"
},
{
"name": "RHSA-2018:1974",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1974"
},
{
"name": "RHSA-2018:1205",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
},
{
"name": "RHSA-2018:1721",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1721"
},
{
"name": "103832",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/103832"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us",
"refsource": "CONFIRM",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:oracle:jdk:1.8.0:update152:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jdk:1.7.0:update161:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jdk:1.6.0:update181:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jre:1.6.0:update181:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jre:1.8.0:update152:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jre:1.7.0:update161:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:oracle:jrockit:r28.3.17:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert_us@oracle.com",
"ID": "CVE-2018-2783"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
},
{
"name": "1040697",
"refsource": "SECTRACK",
"tags": [
"Broken Link"
],
"url": "http://www.securitytracker.com/id/1040697"
},
{
"name": "103832",
"refsource": "BID",
"tags": [
"Broken Link"
],
"url": "http://www.securityfocus.com/bid/103832"
},
{
"name": "https://security.netapp.com/advisory/ntap-20180419-0001/",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20180419-0001/"
},
{
"name": "RHSA-2018:1205",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
},
{
"name": "RHSA-2018:1203",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
},
{
"name": "USN-3644-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/3644-1/"
},
{
"name": "RHSA-2018:1724",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1724"
},
{
"name": "RHSA-2018:1723",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1723"
},
{
"name": "RHSA-2018:1722",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1722"
},
{
"name": "RHSA-2018:1721",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1721"
},
{
"name": "RHSA-2018:1975",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1975"
},
{
"name": "RHSA-2018:1974",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1974"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us"
},
{
"name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 4.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.2,
"impactScore": 5.2
}
},
"lastModifiedDate": "2022-10-06T18:56Z",
"publishedDate": "2018-04-19T02:29Z"
}
}
}
fkie_cve-2018-2783
Vulnerability from fkie_nvd
Published
2018-04-19 02:29
Modified
2024-11-21 04:04
Severity ?
Summary
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
References
| ▶ | URL | Tags | |
|---|---|---|---|
| secalert_us@oracle.com | http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html | Patch, Vendor Advisory | |
| secalert_us@oracle.com | http://www.securityfocus.com/bid/103832 | Broken Link | |
| secalert_us@oracle.com | http://www.securitytracker.com/id/1040697 | Broken Link | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:1203 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:1205 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:1721 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:1722 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:1723 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:1724 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:1974 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:1975 | Third Party Advisory | |
| secalert_us@oracle.com | https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 | Third Party Advisory | |
| secalert_us@oracle.com | https://security.netapp.com/advisory/ntap-20180419-0001/ | Third Party Advisory | |
| secalert_us@oracle.com | https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03857en_us | Third Party Advisory | |
| secalert_us@oracle.com | https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03915en_us | Third Party Advisory | |
| secalert_us@oracle.com | https://usn.ubuntu.com/3644-1/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html | Patch, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/103832 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securitytracker.com/id/1040697 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:1203 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:1205 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:1721 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:1722 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:1723 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:1724 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:1974 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:1975 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://security.netapp.com/advisory/ntap-20180419-0001/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03857en_us | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03915en_us | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://usn.ubuntu.com/3644-1/ | Third Party Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| oracle | jdk | 1.6.0 | |
| oracle | jdk | 1.7.0 | |
| oracle | jdk | 1.8.0 | |
| oracle | jre | 1.6.0 | |
| oracle | jre | 1.7.0 | |
| oracle | jre | 1.8.0 | |
| oracle | jrockit | r28.3.17 | |
| redhat | satellite | 5.6 | |
| redhat | satellite | 5.7 | |
| redhat | satellite | 5.8 | |
| redhat | enterprise_linux_desktop | 6.0 | |
| redhat | enterprise_linux_desktop | 7.0 | |
| redhat | enterprise_linux_server | 6.0 | |
| redhat | enterprise_linux_server | 7.0 | |
| redhat | enterprise_linux_workstation | 6.0 | |
| redhat | enterprise_linux_workstation | 7.0 | |
| canonical | ubuntu_linux | 16.04 | |
| canonical | ubuntu_linux | 17.10 | |
| hp | xp7_command_view | * |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:jdk:1.6.0:update181:*:*:*:*:*:*",
"matchCriteriaId": "5B9A0DD9-878D-42E8-AA57-283E5D1E0A64",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jdk:1.7.0:update161:*:*:*:*:*:*",
"matchCriteriaId": "4AA4AF8B-2E5E-4A5E-8930-B53A01A22C78",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jdk:1.8.0:update152:*:*:*:*:*:*",
"matchCriteriaId": "A2EB8815-20EE-4A0B-A001-73995114333D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jre:1.6.0:update181:*:*:*:*:*:*",
"matchCriteriaId": "DD3B3C9B-A53B-4921-8F5F-FF118283D958",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jre:1.7.0:update161:*:*:*:*:*:*",
"matchCriteriaId": "32F5FDBE-ED30-48A9-B130-A48309C7D2CD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jre:1.8.0:update152:*:*:*:*:*:*",
"matchCriteriaId": "1988C207-4D9F-4FD2-9652-30CB2C65FE8C",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:jrockit:r28.3.17:*:*:*:*:*:*:*",
"matchCriteriaId": "9A13AA87-5F14-4728-B317-17C3A782FA34",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*",
"matchCriteriaId": "D4840254-CC76-4113-BC61-360BD15582B9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*",
"matchCriteriaId": "85EA16E0-9261-45C4-840F-5366E9EAC5E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
"matchCriteriaId": "F4F86C3C-B99C-44C6-97D7-163DC3F59687",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "33C068A4-3780-4EAB-A937-6082DF847564",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "825ECE2D-E232-46E0-A047-074B34DB1E97",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
"matchCriteriaId": "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
"matchCriteriaId": "9070C9D8-A14A-467F-8253-33B966C16886",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*",
"matchCriteriaId": "87D4ED85-90F6-47E6-BF08-3595DB22C7B1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."
},
{
"lang": "es",
"value": "Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: Security). Las versiones compatibles que se han visto afectadas son JavaSE: 6u181, 7u161 y 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Una vulnerabilidad dif\u00edcilmente explotable permite que un atacante sin autenticar que tenga acceso a red por m\u00faltiples protocolos comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualizaci\u00f3n, inserci\u00f3n o supresi\u00f3n de datos confidenciales o de todos los datos accesibles de Java SE, Java SE Embedded y JRockit, as\u00ed como el acceso sin autorizaci\u00f3n a datos confidenciales o todos los datos accesibles de Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad aplica a la implementaci\u00f3n del cliente y el servidor de Java. Esta vulnerabilidad puede ser explotada mediante aplicaciones Java Web Start en sandbox y applets Java en sandbox. Tambi\u00e9n puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start o applets Java en sandbox, como a trav\u00e9s de un servicio web. CVSS 3.0 Base Score 7.4 (impactos de confidencialidad e integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."
}
],
"id": "CVE-2018-2783",
"lastModified": "2024-11-21T04:04:26.593",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 4.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.2,
"impactScore": 5.2,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2018-04-19T02:29:03.020",
"references": [
{
"source": "secalert_us@oracle.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Broken Link"
],
"url": "http://www.securityfocus.com/bid/103832"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Broken Link"
],
"url": "http://www.securitytracker.com/id/1040697"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1721"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1722"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1723"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1724"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1974"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1975"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20180419-0001/"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/3644-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.securityfocus.com/bid/103832"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.securitytracker.com/id/1040697"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1721"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1722"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1723"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1724"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1974"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1975"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20180419-0001/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/3644-1/"
}
],
"sourceIdentifier": "secalert_us@oracle.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
ghsa-36xm-wx7c-g2hq
Vulnerability from github
Published
2022-05-13 01:16
Modified
2022-05-13 01:16
Severity ?
VLAI Severity ?
Details
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
{
"affected": [],
"aliases": [
"CVE-2018-2783"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2018-04-19T02:29:00Z",
"severity": "HIGH"
},
"details": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"id": "GHSA-36xm-wx7c-g2hq",
"modified": "2022-05-13T01:16:55Z",
"published": "2022-05-13T01:16:55Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2783"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:1721"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:1722"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:1723"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:1724"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:1974"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:1975"
},
{
"type": "WEB",
"url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20180419-0001"
},
{
"type": "WEB",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us"
},
{
"type": "WEB",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/3644-1"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/103832"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1040697"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"type": "CVSS_V3"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…