REDHAT-BUG-1602145: Medium severity oracle java se 7 vulnerability

Published Jul 17, 2018

Updated

Oracle Java SE 6u201, 7u191, 8u181, and 10.0.2 fixes an unspecified vulnerability in the JSSE component (CVE-2018-2973). Upstream has CVSS scored this issue as: 5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

External Reference:

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA

Affected Software

1 affected component

Oracle Java Se

Event History

Jul 17, 2018

Data Sourced

via Red Hat·09:07 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The upstream CVSS vector indicates that it is remotely exploitable over the network and requires no privileges or user interaction. Exploitation has high attack complexity.

What is the potential impact if exploitation succeeds?

The stated CVSS vector assigns high impact to integrity, with no confidentiality or availability impact. The scope is listed as unchanged.

Which Java releases include a fix?

Oracle Java SE 6u201, 7u191, 8u181, and 10.0.2 are identified as containing fixes for this JSSE vulnerability.

REDHAT-BUG-1602145: Medium severity oracle java se 7 vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Which Java releases include a fix?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Which Java releases include a fix?