Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11340
HistoryOct 16, 2018 - 12:00 a.m.

KLA11340 Multiple vulnerabilities in Oracle Java SE

2018-10-1600:00:00
Kaspersky Lab
threats.kaspersky.com
740

9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

8.4 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

83.9%

JSON

Detect date:

10/16/2018

Severity:

Critical

Description:

Multiple serious vulnerabilities were found in Oracle Java SE. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service, bypass security restrictions.

Affected products:

Java SE 6u201 and earlier
Java SE 7u191 and earlier
Java SE 8u182 and earlier
Java SE 11 and earlier
Java SE Embedded 8u181 and earlier
JRockit R28.3.19 and earlier

Solution:

Update to the latest version
Oracle software downloads

Original advisories:

[https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html#AppendixJAVA](<Oracle Critical Patch Update Advisory - October 2018>)

Impacts:

ACE

Related products:

Oracle Java JRE 1.8.x

CVE-IDS:

CVE-2018-31836.8High
CVE-2018-32095.1High
CVE-2018-31695.1High
CVE-2018-31495.1High
CVE-2018-32113.3Warning
CVE-2018-31806.8High
CVE-2018-32145.0Warning
CVE-2018-31574.3Warning
CVE-2018-31504.3Warning
CVE-2018-137854.3Warning
CVE-2018-31362.6Warning
CVE-2018-31392.6Warning

References

Related

nessus 73
redhat 17
ibm 54
aix 1
suse 3
openvas 23
photon 3
ubuntu 2
oraclelinux 5
amazon 4
debian 2
centos 5
osv 2
mageia 1
gentoo 1
cloudfoundry 1
f5 2
nessus
nessus
Oracle Java SE Multiple Vulnerabilities (October 2018 CPU) (Unix)
2018-10-19 00:00:00
Oracle Java SE Multiple Vulnerabilities (October 2018 CPU)
2018-10-19 00:00:00
Oracle Java SE 6 < Update 211 / 7 < Update 201 / 8 < Update 191 / 11 < Update 1 Multiple Vulnerabilities (October 2018 CPU)
2019-05-02 00:00:00
redhat
redhat
(RHSA-2018:3003) Critical: java-1.8.0-oracle security update
2018-10-24 20:52:37
(RHSA-2018:3002) Critical: java-1.8.0-oracle security update
2018-10-24 20:52:31
(RHSA-2018:3852) Moderate: java-1.8.0-ibm security update
2018-12-18 14:54:15
ibm
ibm
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum LSF Analytics
2018-11-30 05:15:01
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Platform Symphony and IBM Spectrum Symphony
2021-07-02 09:51:31
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum LSF Process Manager
2018-11-30 05:15:01
aix
aix
Multiple vulnerabilities in IBM Java SDK affect AIX
2018-12-14 12:06:34
suse
suse
Security update for java-11-openjdk (moderate)
2018-10-19 00:10:37
Security update for java-1_8_0-openjdk (important)
2019-01-12 00:00:00
Security update for java-1_7_0-openjdk (important)
2019-01-12 00:00:00
openvas
openvas
Ubuntu Update for openjdk-lts USN-3804-1
2018-11-01 00:00:00
openSUSE: Security Advisory for java-11-openjdk (openSUSE-SU-2018:3235-1)
2018-10-26 00:00:00
Debian Security Advisory DSA 4326-1 (openjdk-8 - security update)
2018-10-25 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0192
2018-10-25 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0106
2018-11-02 00:00:00
Critical Photon OS Security Update - PHSA-2018-0192
2018-10-25 00:00:00
ubuntu
ubuntu
OpenJDK vulnerabilities
2018-10-30 00:00:00
OpenJDK 7 vulnerabilities
2018-11-16 00:00:00
oraclelinux
oraclelinux
java-1.8.0-openjdk security update
2018-10-17 00:00:00
java-1.8.0-openjdk security update
2018-10-17 00:00:00
java-11-openjdk security update
2018-11-09 00:00:00
amazon
amazon
Critical: java-1.8.0-openjdk
2018-11-05 19:33:00
Critical: java-1.8.0-openjdk
2018-10-25 16:14:00
Critical: java-1.7.0-openjdk
2018-12-06 20:23:00
debian
debian
[SECURITY] [DSA 4326-1] openjdk-8
2018-10-25 21:22:38
[SECURITY] [DLA 1590-1] openjdk-7 security update
2018-11-22 22:14:25
centos
centos
java security update
2018-11-20 23:42:14
java security update
2018-10-22 16:25:25
java security update
2018-10-22 14:45:40
osv
osv
openjdk-8 - security update
2018-10-25 00:00:00
openjdk-7 - security update
2018-11-22 00:00:00
mageia
mageia
Updated java-1.8.0-openjdk packages fix security vulnerabilities
2018-11-03 14:55:18
gentoo
gentoo
Oracle JDK/JRE: Multiple vulnerabilities
2019-08-15 00:00:00
cloudfoundry
cloudfoundry
Cloud Foundry products uses vulnerable versions of Java | Cloud Foundry
2019-02-06 00:00:00
f5
f5
K03451253 : Java vulnerabilities CVE-2018-3150, CVE-2018-3157, and CVE-2018-13785
2019-01-07 00:00:00
K50394032 : Java SE vulnerabilities CVE-2018-3149, CVE-2018-3169, and CVE-2018-3209
2019-01-07 00:00:00

9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

8.4 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

83.9%

JSON
Related for KLA11340
nessus73redhat17ibm54aix1suse3openvas23photon3ubuntu2oraclelinux5amazon4debian2centos5osv2mageia1gentoo1cloudfoundry1f52