Security Bulletin: Security vulnerabilities have been identified in IBM Java Runtime and the microcode shipped with the DS8000 Hardware Management Console (HMC)

Summary The updates indicated below have been released to address the following vulnerabilities: CVE-2018-1111 - Vulnerability in the NetworkManager integration script CVE-2018-2783 - IBM Java Runtime vulnerability CVE-2018-2790 - IBM Java Runtime vulnerability CVE-2018-5391 - Improper handling o...

Amazon Linux 2 : java-1.7.0-openjdk (ALAS-2019-1209)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in Deployment component in the Java SE component of Oracle Java SE. An unauthenticated attacker with network access via multiple protocols could cause denial of service condition with the aid of human...

Privilege Escalation

Oracle Java SE is vulnerable to privilege escalation. A remote unauthenticated attacker could exploit the flawed Utility component and cause unauthorized update, insert or delete access to some of Java SE accessible data...

Information Disclosure

Oracle Java SE is vulnerable to information disclosure vulnerability. The vulnerability exists in an unknown function of the component Networking. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedde with the aid of human interaction oth...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE due to an unknown functionality of the component JSSE. An unauthenticated attacker with network access via SSL/TLS could compromise Java SE...

Privilege Escalation

Oracle Java SE is vulnerable to privilege escalation vulnerability. The vulnerability exists in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE due to some unknown processing of the component JNDI. An unauthenticated attacker with network access via multiple protocols could...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service attacks. A remote unauthenticated attacker could exploit a flaw in the Sound component to cause partial denial of service conditions...

Privilege Escalation

Oracle Java SE is vulnerable to privilege escalation vulnerability. The vulnerability exists in the Java SE, Java SE Embedded component of Oracle Java SE due to an unknown code block of the component Hotspot. An unauthenticated attacker with network access via multiple protocols could compromise...

Improper Access Control

Oracle Java SE is vulnerable to improper access control. A local attacker could exploit a flaw in Java SE Installer component to gain elevated privileges...

Privilege Escalation

Oracle Java SE is vulnerable to privilege escalation attacks. The vulnerability exists in an unknown functionality of the component RMI. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, JRockit resulting in unauthorized update, insert or delete acce...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in an unknown code block of the component JAXP. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded, JRockit causing a partial DoS condition...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in an unknown functionality of the subcomponent AWT. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded, JRockit causing a partial DoS condition...

Privilege Escalation

Oracle Java SE is vulnerable to privilege escalation vulnerability. An unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes could compromise Java SE, JRockit with the aid of human interaction from a person other than the attacker...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in an unknown function of the component Security. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded, JRockit causing a parital denial of service...

Improper Access Control

Oracle Java SE is vulnerable to improper access control vulnerability. This occurs in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: AWT. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded with the help of...

Improper Access Control

Oracle Java SE is vulnerable to improper access control vulnerability. This exists in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Libraries. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded,...

Improper Access Control

Oracle Java SE is vulnerable to improper access control vulnerability. This is because the JMX component of OpenJDK failed to properly set the deserialization filter for the SingleEntryRegistry in certain cases. A remote attacker could possibly use this flaw to bypass intended deserialization...

Improper Access Control

Oracle Java SE is vulnerable to improper access control vulnerability. A remote user could exploit a flaw in the Java SE, Java SE Embedded AWT component to modify data...

Improper Access Control

Oracle Java SE is vulnerable to Improper access control vulnerability. This occurs in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded, JRockit with the help of...