CVE-2018-3157: Medium severity oracle java se 7 vulnerability

Published Oct 17, 2018

Updated

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Sound). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

Affected Software

2 affected components

Oracle JDK=11.0.0

ORACLE JRE=11.0.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Event History

Oct 17, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-3157?

CVE-2018-3157 has a high severity rating, indicating a significant risk to users of affected Java SE versions.

How do I fix CVE-2018-3157?

To fix CVE-2018-3157, update to the latest version of Oracle Java SE that is not affected by this vulnerability.

Who is affected by CVE-2018-3157?

CVE-2018-3157 affects users of Oracle Java SE version 11.0.0.

What types of attacks can exploit CVE-2018-3157?

CVE-2018-3157 can be exploited by unauthenticated attackers with network access, potentially leading to arbitrary code execution.

What component of Oracle Java SE does CVE-2018-3157 involve?

CVE-2018-3157 involves a vulnerability in the Sound component of Oracle Java SE.