OpenJDK: ECDSA implementation timing attack (JCE, 8175110)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JCE. Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

OpenJDK: insufficient access control checks in ThreadPoolExecutor (Libraries, 8172204)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

OpenJDK: insufficient access control checks in ActivationID (RMI, 8173697)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: RMI. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

PT-2017-11085

Name of the Vulnerable Software and Affected Versions Java SE versions 6u151, 7u141, 8u131 Java SE Embedded version 8u131 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE and Java SE Embedded. Successful attacks require huma...

UBUNTU-CVE-2017-10116

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with...

PT-2017-11105

Name of the Vulnerable Software and Affected Versions Java SE versions 6u151, 7u141, 8u131 Java SE Embedded version 8u131 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE and Java SE Embedded. Successful attacks require huma...

PT-2017-11109

Name of the Vulnerable Software and Affected Versions Java SE version 8u131 Java SE Embedded version 8u131 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE and Java SE Embedded. Successful attacks require human interaction...

PT-2017-11235

Name of the Vulnerable Software and Affected Versions Java SE versions 6u151, 7u141, and 8u131 Java SE Embedded version 8u131 JRockit version R28.3.14 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded,...

UBUNTU-CVE-2017-10087

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2017-10074

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Hotspot. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

UBUNTU-CVE-2017-10118

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JCE. Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

PT-2017-11052

Name of the Vulnerable Software and Affected Versions Java SE versions 6u151, 7u141, 8u131 Java SE Embedded version 8u131 JRockit version R28.3.14 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit,...

PT-2017-11072

Name of the Vulnerable Software and Affected Versions Java SE versions 6u151, 7u141, 8u131 Java SE Embedded version 8u131 Description A difficult to exploit vulnerability in Java SE and Java SE Embedded allows an unauthenticated attacker with network access via multiple protocols to compromise th...

UBUNTU-CVE-2017-10243

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JAX-WS. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with...

PT-2017-11088

Name of the Vulnerable Software and Affected Versions Java SE versions 7u141 and 8u131 Java SE Embedded version 8u131 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE and Java SE Embedded. Successful attacks require human...

PT-2017-11131

Name of the Vulnerable Software and Affected Versions Java SE versions 6u151, 7u141, 8u131 Java SE Embedded version 8u131 JRockit version R28.3.14 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit,...

PT-2017-11185

Name of the Vulnerable Software and Affected Versions Java SE versions 6u151, 7u141, 8u131 Java SE Embedded version 8u131 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE and Java SE Embedded. Successful attacks require huma...

PT-2017-11116

Name of the Vulnerable Software and Affected Versions Java SE versions 7u141 and 8u131 Java SE Embedded version 8u131 JRockit version R28.3.14 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit,...

UBUNTU-CVE-2017-10090

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protoco...

UBUNTU-CVE-2017-10109

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Serialization. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker...