Fedora Update for java-1.7.0-openjdk FEDORA-2012-13138
🗓️ 04 Sep 2012 00:00:00Reported by Copyright (C) 2012 Greenbone AGType
openvas🔗 plugins.openvas.org👁 43 Views
| Reporter | Title | Published | Views | Family All 1257 |
|---|---|---|---|---|
| Java Applet Rhino Script Engine Remote Code Execution | 30 Nov 201100:00 | – | zdt | |
| Java Applet Rhino Script Engine Remote Code Execution | 30 Nov 201100:00 | – | zdt | |
| OpenJDK: missing checkSetFactory calls in HttpsURLConnection (JSSE, 7096936) | 23 Apr 201216:52 | – | redhat | |
| OpenJDK: JavaSound incorrect bounds check (Sound, 7088367) | 23 Apr 201216:52 | – | redhat | |
| OpenJDK: off-by-one bug in ZIP reading code (JRE, 7118283) | 23 Apr 201216:52 | – | redhat | |
| OpenJDK: KeyboardFocusManager focus stealing (AWT, 7110683) | 23 Apr 201216:52 | – | redhat | |
| OpenJDK: unrestricted use of TimeZone.setDefault() (i18n, 7110687) | 23 Apr 201216:52 | – | redhat | |
| OpenJDK: incomplete info in the deserialization exception (Serialization, 7110700) | 23 Apr 201216:52 | – | redhat | |
| OpenJDK: mutable repository identifiers (CORBA, 7110704) | 23 Apr 201216:52 | – | redhat | |
| Critical: Red Hat Security Advisory: java-1.6.0-ibm security update | 24 Apr 201219:32 | – | redhat |
10
# SPDX-FileCopyrightText: 2012 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_xref(name:"URL", value:"http://lists.fedoraproject.org/pipermail/package-announce/2012-September/085935.html");
script_oid("1.3.6.1.4.1.25623.1.0.864684");
script_version("2024-07-25T05:05:41+0000");
script_tag(name:"last_modification", value:"2024-07-25 05:05:41 +0000 (Thu, 25 Jul 2024)");
script_tag(name:"creation_date", value:"2012-09-04 11:32:25 +0530 (Tue, 04 Sep 2012)");
script_xref(name:"CISA", value:"Known Exploited Vulnerability (KEV) catalog");
script_xref(name:"URL", value:"https://www.cisa.gov/known-exploited-vulnerabilities-catalog");
script_cve_id("CVE-2012-4681", "CVE-2012-0497", "CVE-2011-3571", "CVE-2012-0503",
"CVE-2012-0505", "CVE-2012-0502", "CVE-2011-3563", "CVE-2011-5035",
"CVE-2012-0501", "CVE-2012-0506", "CVE-2011-3547", "CVE-2011-3548",
"CVE-2011-3551", "CVE-2011-3552", "CVE-2011-3544", "CVE-2011-3521",
"CVE-2011-3554", "CVE-2011-3389", "CVE-2011-3558", "CVE-2011-3556",
"CVE-2011-3557", "CVE-2011-3560");
script_tag(name:"cvss_base", value:"10.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2024-07-24 14:29:45 +0000 (Wed, 24 Jul 2024)");
script_xref(name:"FEDORA", value:"2012-13138");
script_name("Fedora Update for java-1.7.0-openjdk FEDORA-2012-13138");
script_tag(name:"summary", value:"The remote host is missing an update for the 'java-1.7.0-openjdk'
package(s) announced via the referenced advisory.");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2012 Greenbone AG");
script_family("Fedora Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/fedora", "ssh/login/rpms", re:"ssh/login/release=FC16");
script_tag(name:"affected", value:"java-1.7.0-openjdk on Fedora 16");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"qod_type", value:"package");
script_tag(name:"solution_type", value:"VendorFix");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release)
exit(0);
res = "";
if(release == "FC16")
{
if ((res = isrpmvuln(pkg:"java-1.7.0-openjdk", rpm:"java-1.7.0-openjdk~1.7.0.6~2.3.1.fc16.2", rls:"FC16")) != NULL)
{
security_message(data:res);
exit(0);
}
if (__pkg_match) exit(99);
exit(0);
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
25 Jul 2024 00:00Current
8.3High risk
Vulners AI Score8.3
CVSS 210
CVSS 3.19.8
EPSS0.98536
SSVC