CVE-2017-10081: Medium severity oracle java se 7 vulnerability
A flaw was found in the way the Hotspot component of OpenJDK processed extraneous brackets in function signatures. An untrusted Java application or applet could use this flaw to bypass Java certain sandbox restrictions.
Other sources
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10081?
CVE-2017-10081 is considered an easily exploitable vulnerability that poses a high risk due to its potential to allow unauthenticated attackers network access.
How do I fix CVE-2017-10081?
To fix CVE-2017-10081, it is recommended to update the affected versions of Java SE and Java SE Embedded to the latest patched versions provided by Oracle.
Which versions are affected by CVE-2017-10081?
CVE-2017-10081 affects Oracle Java SE versions 6u151, 7u141, and 8u131, as well as Java SE Embedded version 8u131.
Can CVE-2017-10081 be exploited remotely?
Yes, CVE-2017-10081 can be exploited remotely by unauthenticated attackers who have network access.
Is there a workaround for CVE-2017-10081?
There are no effective workarounds for CVE-2017-10081 aside from applying the recommended updates to mitigate the vulnerability.