CVE-2017-3533

CVE-2017-3533 is an access restriction bypass in the Networking component (FTP client) of Oracle/OpenJDK Java SE. The newline-injection flaw in the FTP client could allow a remote attacker to manipulate FTP connections established by a Java application. Affected: Java SE/Embedded and JRockit vari...

CVE-2017-3544

CVE-2017-3544 is a content spoofing vulnerability in the Networking component of Oracle/OpenJDK’s Java SE/Java SE Embedded/JRockit, specifically an SMTP newline-injection issue in the SMTP client. The connected documents establish that a remote attacker could exploit this via SMTP to manipulate S...

CVE-2017-3539

CVE-2017-3539 (OpenJDK/JRE): A vulnerability in the Security component prevented jar integrity verification from enforcing a restricted algorithm set, allowing an attacker to modify content in a Jar file using weak signing keys or hashes. Affected: OpenJDK/OpenJDK Runtime/JDK with Java SE Securit...

CVE-2017-3512

CVE-2017-3512 affects Oracle Java SE AWT with affected Java versions 7u131 and 8u121; exploitation requires network access and user interaction, with high impact across confidentiality, integrity and availability. IBM Netezza-related bulletins show remediation by upgrading IBM Java JRE to 8.0-5.4...