A newline injection flaw was discovered in the SMTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate SMTP connections established by a Java application.

References

www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA

bugzilla.redhat.com/show_bug.cgi?id=1443068

veracode 1

cve 1

debiancve 1

ubuntucve 1

prion 1

threatpost 2

thn 1

nessus 53

redhat 10

oraclelinux 3

ibm 32

ubuntu 3

kaspersky 1

openvas 30

osv 2

debian 2

amazon 2

mageia 1

centos 3

gentoo 2

suse 8

aix 1

archlinux 1

photon 1

androidsecurity 1

oracle 1

veracode

Privilege Escalation

2019-05-02 06:10:13

cve

CVE-2017-3544

2017-04-24 19:59:00

debiancve

CVE-2017-3544

2017-04-24 19:59:00

ubuntucve

CVE-2017-3544

2017-04-24 00:00:00

prion

Design/Logic Flaw

2017-04-24 19:59:00

threatpost

Google Patches Critical 'Broadpwn' Bug in July Security Update

2017-07-06 12:30:16

Apple Patches 'BroadPwn' Bug in iOS 10.3.3

2017-07-20 14:08:46

thn

Millions of Android Devices Using Broadcom Wi-Fi Chip Can Be Hacked Remotely

2017-07-06 20:29:00

nessus

Oracle JRockit R28.3.13 Multiple Vulnerabilities (April 2017 CPU)

2017-04-20 00:00:00

RHEL 6 / 7 : java-1.6.0-sun (RHSA-2017:1119)

2017-04-25 00:00:00

Ubuntu 16.04 LTS : OpenJDK 8 vulnerabilities (USN-3275-1)

2017-05-12 00:00:00

redhat

(RHSA-2017:1119) Moderate: java-1.6.0-sun security update

2017-04-24 06:49:36

(RHSA-2017:1117) Moderate: java-1.8.0-oracle security update

2017-04-24 06:49:02

(RHSA-2017:1118) Moderate: java-1.7.0-oracle security update

2017-04-24 06:49:21

oraclelinux

java-1.8.0-openjdk security update

2017-04-20 00:00:00

java-1.7.0-openjdk security update

2017-05-09 00:00:00

java-1.8.0-openjdk security and bug fix update

2017-04-20 00:00:00

ibm

Security Bulletin: Multiple vulnerabilities in IBM® Java Runtime affect IBM Cognos Command Center

2018-06-15 23:46:50

Security Bulletin: IBM Java SDK as used in IBM QRadar SIEM is vulnerable to multiple CVE’s.

2018-06-16 22:02:18

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Operations Analytics Predictive Insights

2018-06-17 15:40:26

ubuntu

OpenJDK 8 vulnerabilities

2017-05-11 00:00:00

OpenJDK 7 regression

2017-05-18 00:00:00

OpenJDK 7 vulnerabilities

2017-05-15 00:00:00

kaspersky

KLA11005 Multiple vulnerabilities in Oracle Java SE

2017-04-24 00:00:00

openvas

Debian: Security Advisory (DSA-3858-1)

2017-05-18 00:00:00

Debian Security Advisory DSA 3858-1 (openjdk-7 - security update)

2017-05-19 00:00:00

Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2017-1099)

2020-01-23 00:00:00

osv

openjdk-7 - security update

2017-05-26 00:00:00

openjdk-7 - security update

2017-05-19 00:00:00

debian

[SECURITY] [DLA 954-1] openjdk-7 security update

2017-05-26 16:57:18

[SECURITY] [DSA 3858-1] openjdk-7 security update

2017-05-19 20:54:31

amazon

Medium: java-1.8.0-openjdk

2017-05-09 23:21:00

Medium: java-1.7.0-openjdk

2017-06-06 16:33:00

mageia

Updated java-1.8.0-openjdk packages fix security vulnerability

2017-05-01 02:33:52

centos

java security update

2017-04-20 23:21:35

java security update

2017-04-20 22:44:32

java security update

2017-05-09 16:59:58

gentoo

Oracle JDK/JRE: Multiple vulnerabilities

2017-05-07 00:00:00

IcedTea: Multiple vulnerabilities

2017-07-05 00:00:00

suse

Security update for java-1_8_0-openjdk (important)

2017-05-30 18:15:32

Security update for java-1_8_0-openjdk (important)

2017-06-08 18:10:18

Security update for java-1_7_0-openjdk (important)

2017-05-24 21:12:03

aix

There are multiple vulnerabilities in IBM SDK Java Technology Edition

2017-06-21 15:44:57

archlinux

[ASA-201708-8] jdk7-openjdk: multiple issues

2017-08-12 00:00:00

photon

Critical Photon OS Security Update - PHSA-2023-4.0-0413

2023-06-19 00:00:00

androidsecurity

Android Security Bulletin—July 2017

2017-07-05 00:00:00

oracle

Oracle Critical Patch Update Advisory - April 2017

2017-04-18 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

JSON

Related for RH:CVE-2017-3544