CVE-2011-3544
Critical · 9.8 CISA KEVCVSS
9.8
EPSS
96.7%
Published
Oct 19, 2011
CISA due date
Mar 24, 2022
The record
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Chainguard | openjdk-11-openj9 | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-dbg | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-jdk | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-jvm | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-policy | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-doc | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-jmods | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-jre | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9 | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-dbg | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-jdk | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-jvm | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-policy | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-doc | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-jmods | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-jre | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9 | 0 | 0.48.0-r2 |
| Chainguard | openjdk-21-openj9-dbg | 0 | 0.48.0-r2 |
| Chainguard | openjdk-21-openj9-default-jdk | 0 | 0.48.0-r2 |
| Chainguard | openjdk-21-openj9-default-jvm | 0 | 0.48.0-r2 |
| Chainguard | openjdk-21-openj9-default-policy | 0 | 0.48.0-r2 |
| Chainguard | openjdk-21-openj9-doc | 0 | 0.48.0-r2 |
| Chainguard | openjdk-21-openj9-jmods | 0 | 0.48.0-r2 |
| Chainguard | openjdk-21-openj9-jre | 0 | 0.48.0-r2 |
| Chainguard | openjdk-8-openj9 | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-dbg | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-default-jdk | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-default-jvm | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-doc | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-jre | 0 | 0.53.0-r1 |
| Debian:5.0 | openjdk-6 | 0 | 6b18-1.8.10-0~lenny2 |
| Debian:6.0 | openjdk-6 | 0 | 6b18-1.8.10-0+squeeze2 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk | 0 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-debuginfo | 0 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-demo | 0 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-devel | 0 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-javadoc | 0 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-src | 0 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk | 0 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-debuginfo | 0 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-demo | 0 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-devel | 0 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-javadoc | 0 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-src | 0 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
| Red Hat:enterprise_linux:6::server | java-1.6.0-openjdk | 0 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
| Red Hat:enterprise_linux:6::server | java-1.6.0-openjdk-debuginfo | 0 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
| Red Hat:enterprise_linux:6::server | java-1.6.0-openjdk-demo | 0 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
| Red Hat:enterprise_linux:6::server | java-1.6.0-openjdk-devel | 0 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
| Red Hat:enterprise_linux:6::server | java-1.6.0-openjdk-javadoc | 0 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
| Red Hat:enterprise_linux:6::server | java-1.6.0-openjdk-src | 0 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
| Red Hat:network_satellite:5.4::el5 | java-1.6.0-ibm | 0 | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat:network_satellite:5.4::el5 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat:network_satellite:5.4::el6 | java-1.6.0-ibm | 0 | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat:network_satellite:5.4::el6 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm | 0 | 1:1.6.0.10.0-1jpp.2.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-demo | 0 | 1:1.6.0.10.0-1jpp.2.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.10.0-1jpp.2.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-javacomm | 0 | 1:1.6.0.10.0-1jpp.2.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-jdbc | 0 | 1:1.6.0.10.0-1jpp.2.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-plugin | 0 | 1:1.6.0.10.0-1jpp.2.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-src | 0 | 1:1.6.0.10.0-1jpp.2.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun | 0 | 1:1.6.0.29-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-demo | 0 | 1:1.6.0.29-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-devel | 0 | 1:1.6.0.29-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-jdbc | 0 | 1:1.6.0.29-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-plugin | 0 | 1:1.6.0.29-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-src | 0 | 1:1.6.0.29-1jpp.1.el4 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm | 0 | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-accessibility | 0 | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-demo | 0 | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-devel | 0 | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-javacomm | 0 | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-jdbc | 0 | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-plugin | 0 | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-src | 0 | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun | 0 | 1:1.6.0.29-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-demo | 0 | 1:1.6.0.29-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-devel | 0 | 1:1.6.0.29-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-jdbc | 0 | 1:1.6.0.29-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-plugin | 0 | 1:1.6.0.29-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-src | 0 | 1:1.6.0.29-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm | 0 | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-accessibility | 0 | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-demo | 0 | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-devel | 0 | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-javacomm | 0 | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-jdbc | 0 | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-plugin | 0 | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-src | 0 | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun | 0 | 1:1.6.0.29-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-demo | 0 | 1:1.6.0.29-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-devel | 0 | 1:1.6.0.29-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-jdbc | 0 | 1:1.6.0.29-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-plugin | 0 | 1:1.6.0.29-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-src | 0 | 1:1.6.0.29-1jpp.1.el5 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm | 0 | 1:1.6.0.10.0-1jpp.2.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-demo | 0 | 1:1.6.0.10.0-1jpp.2.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.10.0-1jpp.2.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-javacomm | 0 | 1:1.6.0.10.0-1jpp.2.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-jdbc | 0 | 1:1.6.0.10.0-1jpp.2.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-plugin | 0 | 1:1.6.0.10.0-1jpp.2.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-src | 0 | 1:1.6.0.10.0-1jpp.2.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-sun | 0 | 1:1.6.0.29-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-sun-demo | 0 | 1:1.6.0.29-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-sun-devel | 0 | 1:1.6.0.29-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-sun-jdbc | 0 | 1:1.6.0.29-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-sun-plugin | 0 | 1:1.6.0.29-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-sun-src | 0 | 1:1.6.0.29-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.7.0-ibm | 0 | 1:1.7.0.3.0-1jpp.2.el6_3 |
| Red Hat:rhel_extras:6 | java-1.7.0-ibm-demo | 0 | 1:1.7.0.3.0-1jpp.2.el6_3 |
| Red Hat:rhel_extras:6 | java-1.7.0-ibm-devel | 0 | 1:1.7.0.3.0-1jpp.2.el6_3 |
| Red Hat:rhel_extras:6 | java-1.7.0-ibm-jdbc | 0 | 1:1.7.0.3.0-1jpp.2.el6_3 |
| Red Hat:rhel_extras:6 | java-1.7.0-ibm-plugin | 0 | 1:1.7.0.3.0-1jpp.2.el6_3 |
| Red Hat:rhel_extras:6 | java-1.7.0-ibm-src | 0 | 1:1.7.0.3.0-1jpp.2.el6_3 |
Related vulnerabilities
- CVE-2026-21945 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects openjdk-11-openj9
- CVE-2026-21932 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects openjdk-11-openj9
- CVE-2026-21933 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects openjdk-11-openj9
- CVE-2026-21925 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects openjdk-11-openj9
- CVE-2025-0509 Sparkle Signing Checks Bypass Also affects openjdk-11-openj9
- CVE-2025-21502 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects openjdk-11-openj9
- CVE-2024-40896 In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser… Also affects openjdk-11-openj9
- CVE-2024-54534 The issue was addressed with improved memory handling. Also affects openjdk-11-openj9