CVE-2017-10274
Medium · 6.8CVSS
6.8
EPSS
2.6%
Published
Oct 19, 2017
CISA due date
—
Cloudanix analysis
Monitor only
SSVC: Track
A flaw in older Java software could let attackers who trick someone into running untrusted code steal or change important information on that computer.
- Exploitation
- Requires User Interaction
- Attacker needs
- User Interaction
- Complexity
- High
- Impact
- Data Tampering
- Component
- Library
- Class
- Authorization Bypass
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Flaw in Smart Card IO subcomponent allows sandbox escape in client-side Java deployments, enabling unauthorized creation, deletion, modification, and access to critical data when untrusted code is loaded.
Why it matters to the business
Client environments running Java applets or Web Start applications face risk of data tampering or exposure; servers are unaffected unless they load untrusted code.
How an attack unfolds
An attacker delivers malicious Java code via network protocols to a client that executes it inside the sandbox; human interaction triggers the Smart Card IO path, bypassing restrictions to read or alter accessible data.
How to fix it
Upgrade Oracle Java SE to versions beyond 6u161, 7u151, 8u144, and 9; disable Java Web Start and applet execution where possible; apply vendor patches for affected downstream products such as NetApp and Red Hat distributions.
How to confirm the fix worked
Inventory all Java installations and verify versions exceed the affected ranges; test client applications with untrusted code loading disabled; review update logs from Oracle and OS vendors.
Typical attack path
- Identify targets running vulnerable Java SE versions with sandboxed client applications
- Craft and host malicious applet or Web Start application exploiting Smart Card IO
- Trick user into loading the untrusted code via network access
- Trigger interaction to execute the authorization bypass
- Perform unauthorized data creation, deletion, modification, or access
How to detect it
Review web proxy and browser logs for unexpected Java applet loads; examine Java process execution with untrusted network sources; check endpoint logs for Smart Card IO API calls from sandboxed contexts.
What your security team should do
- Prioritize patching client Java deployments within 30 days given persistent EPSS score
- Disable sandboxed Java execution for internet-facing content
- Scan for affected Oracle JDK/JRE instances across endpoints
- Monitor vendor advisories for NetApp and Red Hat fixed builds
The record
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data as well as unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N).
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Chainguard | openjdk-11-openj9 | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-dbg | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-jdk | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-jvm | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-policy | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-doc | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-jmods | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-jre | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9 | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-dbg | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-jdk | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-jvm | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-policy | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-doc | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-jmods | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-jre | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9 | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-dbg | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-default-jdk | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-default-jvm | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-default-policy | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-doc | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-jmods | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-jre | 0 | 0.53.0-r0 |
| Chainguard | openjdk-8-openj9 | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-dbg | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-default-jdk | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-default-jvm | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-doc | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-jre | 0 | 0.53.0-r1 |
| Debian:7 | openjdk-7 | 0 | 7u151-2.6.11-2~deb7u2 |
| Debian:8 | openjdk-7 | 0 | 7u151-2.6.11-2~deb8u1 |
| Debian:9 | openjdk-8 | 0 | 8u151-b12-1~deb9u1 |
| Mageia:5 | copy-jdk-configs | 0 | 3.3-1.mga5 |
| Mageia:5 | java-1.8.0-openjdk | 0 | 1.8.0.151-1.b12.1.mga5 |
| Mageia:6 | copy-jdk-configs | 0 | 3.3-1.mga6 |
| Mageia:6 | java-1.8.0-openjdk | 0 | 1.8.0.151-1.b12.1.mga6 |
| Red Hat:enterprise_linux:6::client | java-1.7.0-openjdk | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::client | java-1.7.0-openjdk-debuginfo | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::client | java-1.7.0-openjdk-demo | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::client | java-1.7.0-openjdk-devel | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::client | java-1.7.0-openjdk-javadoc | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::client | java-1.7.0-openjdk-src | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::client | java-1.8.0-openjdk | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::client | java-1.8.0-openjdk-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::client | java-1.8.0-openjdk-debuginfo | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::client | java-1.8.0-openjdk-demo | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::client | java-1.8.0-openjdk-demo-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::client | java-1.8.0-openjdk-devel | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::client | java-1.8.0-openjdk-devel-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::client | java-1.8.0-openjdk-headless | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::client | java-1.8.0-openjdk-headless-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::client | java-1.8.0-openjdk-javadoc | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::client | java-1.8.0-openjdk-javadoc-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::client | java-1.8.0-openjdk-src | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::client | java-1.8.0-openjdk-src-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | java-1.7.0-openjdk | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::computenode | java-1.7.0-openjdk-debuginfo | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::computenode | java-1.7.0-openjdk-demo | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::computenode | java-1.7.0-openjdk-devel | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::computenode | java-1.7.0-openjdk-javadoc | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::computenode | java-1.7.0-openjdk-src | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::computenode | java-1.8.0-openjdk | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | java-1.8.0-openjdk-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | java-1.8.0-openjdk-debuginfo | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | java-1.8.0-openjdk-demo | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | java-1.8.0-openjdk-demo-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | java-1.8.0-openjdk-devel | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | java-1.8.0-openjdk-devel-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | java-1.8.0-openjdk-headless | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | java-1.8.0-openjdk-headless-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | java-1.8.0-openjdk-javadoc | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | java-1.8.0-openjdk-javadoc-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | java-1.8.0-openjdk-src | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::computenode | java-1.8.0-openjdk-src-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::server | java-1.7.0-openjdk | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::server | java-1.7.0-openjdk-debuginfo | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::server | java-1.7.0-openjdk-demo | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::server | java-1.7.0-openjdk-devel | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::server | java-1.7.0-openjdk-javadoc | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::server | java-1.7.0-openjdk-src | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::server | java-1.8.0-openjdk | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::server | java-1.8.0-openjdk-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::server | java-1.8.0-openjdk-debuginfo | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::server | java-1.8.0-openjdk-demo | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::server | java-1.8.0-openjdk-demo-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::server | java-1.8.0-openjdk-devel | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::server | java-1.8.0-openjdk-devel-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::server | java-1.8.0-openjdk-headless | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::server | java-1.8.0-openjdk-headless-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::server | java-1.8.0-openjdk-javadoc | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::server | java-1.8.0-openjdk-javadoc-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::server | java-1.8.0-openjdk-src | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::server | java-1.8.0-openjdk-src-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | java-1.7.0-openjdk | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::workstation | java-1.7.0-openjdk-debuginfo | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::workstation | java-1.7.0-openjdk-demo | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::workstation | java-1.7.0-openjdk-devel | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::workstation | java-1.7.0-openjdk-javadoc | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::workstation | java-1.7.0-openjdk-src | 0 | 1:1.7.0.161-2.6.12.0.el6_9 |
| Red Hat:enterprise_linux:6::workstation | java-1.8.0-openjdk | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | java-1.8.0-openjdk-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | java-1.8.0-openjdk-debuginfo | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | java-1.8.0-openjdk-demo | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | java-1.8.0-openjdk-demo-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | java-1.8.0-openjdk-devel | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | java-1.8.0-openjdk-devel-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | java-1.8.0-openjdk-headless | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | java-1.8.0-openjdk-headless-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | java-1.8.0-openjdk-javadoc | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | java-1.8.0-openjdk-javadoc-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | java-1.8.0-openjdk-src | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:6::workstation | java-1.8.0-openjdk-src-debug | 0 | 1:1.8.0.151-1.b12.el6_9 |
| Red Hat:enterprise_linux:7::client | java-1.7.0-openjdk | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.7.0-openjdk-accessibility | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.7.0-openjdk-debuginfo | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.7.0-openjdk-demo | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.7.0-openjdk-devel | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.7.0-openjdk-headless | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.7.0-openjdk-javadoc | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.7.0-openjdk-src | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-accessibility | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-accessibility-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-debuginfo | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-demo | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-demo-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-devel | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-devel-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-headless | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-headless-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-javadoc | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-javadoc-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-javadoc-zip | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-javadoc-zip-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-src | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-src-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.7.0-openjdk | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.7.0-openjdk-accessibility | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.7.0-openjdk-debuginfo | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.7.0-openjdk-demo | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.7.0-openjdk-devel | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.7.0-openjdk-headless | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.7.0-openjdk-javadoc | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.7.0-openjdk-src | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-accessibility | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-accessibility-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-debuginfo | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-demo | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-demo-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-devel | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-devel-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-headless | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-headless-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-javadoc | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-javadoc-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-javadoc-zip | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-javadoc-zip-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-src | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-src-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.7.0-openjdk | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.7.0-openjdk-accessibility | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.7.0-openjdk-debuginfo | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.7.0-openjdk-demo | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.7.0-openjdk-devel | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.7.0-openjdk-headless | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.7.0-openjdk-javadoc | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.7.0-openjdk-src | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.8.0-openjdk | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.8.0-openjdk-accessibility | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.8.0-openjdk-accessibility-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.8.0-openjdk-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.8.0-openjdk-debuginfo | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.8.0-openjdk-demo | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.8.0-openjdk-demo-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.8.0-openjdk-devel | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.8.0-openjdk-devel-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.8.0-openjdk-headless | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.8.0-openjdk-headless-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.8.0-openjdk-javadoc | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.8.0-openjdk-javadoc-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.8.0-openjdk-javadoc-zip | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.8.0-openjdk-javadoc-zip-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.8.0-openjdk-src | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::server | java-1.8.0-openjdk-src-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | java-1.7.0-openjdk | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::workstation | java-1.7.0-openjdk-accessibility | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::workstation | java-1.7.0-openjdk-debuginfo | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::workstation | java-1.7.0-openjdk-demo | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::workstation | java-1.7.0-openjdk-devel | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::workstation | java-1.7.0-openjdk-headless | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::workstation | java-1.7.0-openjdk-javadoc | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::workstation | java-1.7.0-openjdk-src | 0 | 1:1.7.0.161-2.6.12.0.el7_4 |
| Red Hat:enterprise_linux:7::workstation | java-1.8.0-openjdk | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | java-1.8.0-openjdk-accessibility | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | java-1.8.0-openjdk-accessibility-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
| Red Hat:enterprise_linux:7::workstation | java-1.8.0-openjdk-debug | 0 | 1:1.8.0.151-1.b12.el7_4 |
Related vulnerabilities
- CVE-2026-21945 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects openjdk-11-openj9
- CVE-2026-21932 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects openjdk-11-openj9
- CVE-2026-21933 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects openjdk-11-openj9
- CVE-2026-21925 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects openjdk-11-openj9
- CVE-2025-0509 Sparkle Signing Checks Bypass Also affects openjdk-11-openj9
- CVE-2025-21502 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects openjdk-11-openj9
- CVE-2024-40896 In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser… Also affects openjdk-11-openj9
- CVE-2024-54534 The issue was addressed with improved memory handling. Also affects openjdk-11-openj9