[SECURITY] [DLA 954-1] openjdk-7 security update

Package : openjdk-7 Version : 7u131-2.6.9-2deb7u1 CVE ID : CVE-2017-3509 CVE-2017-3511 CVE-2017-3526 CVE-2017-3533 CVE-2017-3539 CVE-2017-3544 Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in privilege escalation, denial of...

OpenJDK: non-constant time GCM authentication tag comparison (JCE, 8143945)

It was discovered that the GCM Galois/Counter Mode implementation in the JCE component in OpenJDK used a non-constant time comparison when comparing GCM authentication tags. A remote attacker could possibly use this flaw to determine the value of the authentication tag...

OpenJDK: insufficient byte type checks (Hotspot, 8132051)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the Hotspot sub-component...

OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)

It was discovered that the HTTP client implementation in the Networking component of OpenJDK could cache and re-use an NTLM authenticated connection in a different security context. A remote attacker could possibly use this flaw to make a Java application perform HTTP requests authenticated with...

Oracle Java SE/JRockit Remote Security Vulnerability (CNVD-2017-07163)

Java SE is short for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE: 7u131, 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13 A remote security...

Oracle Java SE/JRockit Local Security Vulnerability

Java SE stands for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE: 7u131, 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13 contains a security...

Oracle Java SE AWT Remote Vulnerability

Oracle Java SE is the United States Oracle Oracle company's set of standard version of the Java platform for the development and deployment of desktop, server, and embedded devices and real-time environments in the Java application. A security vulnerability exists in the AWT subcomponent of the...

CVE-2017-3511

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JCE. Supported versions that are affected are Java SE: 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with logon to th...

CVE-2017-3512

Vulnerability in the Java SE component of Oracle Java SE subcomponent: AWT. Supported versions that are affected are Java SE: 7u131 and 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks...

Oracle Java SE Remote Vulnerability (CNVD-2017-04740)

Oracle Java SE and Java SE Embedded are both products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, as well as embedded devices and real-time environments; Java SE Embedded is a Java platform for the developmen...

JDK: unspecified vulnerability fixed in 6u141, 7u131, and 8u121 (Deployment)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Deployment. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE...

[SECURITY] [DLA 821-1] openjdk-7 security update

Package : openjdk-7 Version : 7u121-2.6.8-2deb7u1 CVE ID : CVE-2016-5546 CVE-2016-5547 CVE-2016-5548 CVE-2016-5552 CVE-2017-3231 CVE-2017-3241 CVE-2017-3252 CVE-2017-3253 CVE-2017-3260 CVE-2017-3261 CVE-2017-3272 CVE-2017-3289 Several vulnerabilities have been discovered in OpenJDK, an...

Vulnerability of the Java Platform software platform, allowing attackers to modify data

The vulnerability of the Java Platform’s networking components is related to security configuration errors. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to modify, add, or delete data using network packets...

The vulnerability of the Java Platform software platform allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of components in the Java Platform software framework is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through network packets...

The vulnerability of the Java Platform software platform allows a perpetrator to obtain user authentication information.

The vulnerability of component AWT in the Java Platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain user authentication information through network packets...

Vulnerability of the Java Platform software platform, which allows a perpetrator to gain access to data for reading purposes

The vulnerability of the Java Platform software platform’s Deployment component is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain read access to data through network packets...

The vulnerability of the Java Platform software platform allows a perpetrator to breach the confidentiality of information.

The vulnerability of JRockit a sub-component of 2D, components of Oracle Java SE, and the Java Platform software are due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause a system to freeze or, in rare cases, lead to an unexpected shutdown...

Vulnerability of the Java Platform software platform, which allows attackers to bypass certificate verification

The vulnerability of the RMI components of the Java Platform exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to bypass certificate verification using network packets...

Vulnerability of the Java Platform software platform, which allows a perpetrator to trigger a service failure

The vulnerability of the 2D software platform of Java exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to crash through network packets...

Vulnerability of the Java Platform software platform, which allows a perpetrator to gain access to data for reading purposes

The vulnerability of the Java Platform’s networking software components is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to data through network packets...