CVE-2017-10053
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D).
Does this matter?
Lower severity and a low EPSS score (3.45%). Track it; it rarely justifies an emergency change on its own.
Description
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- EPSS
- 3.45% probability · 88th percentile
- CISA KEV
- Not listed
- Affected
- oracle/jdk · oracle/jre · oracle/jrockit · debian/debian linux · redhat/satellite · redhat/enterprise linux desktop · redhat/enterprise linux eus · redhat/enterprise linux server · redhat/enterprise linux server aus · redhat/enterprise linux server tus · redhat/enterprise linux workstation · netapp/active iq unified manager · netapp/cloud backup · netapp/e-series santricity os controller · netapp/e-series santricity storage manager · netapp/element software · netapp/oncommand balance · netapp/oncommand insight · netapp/oncommand performance manager · netapp/oncommand shift · +8 more
- Source
- secalert_us@oracle.com
References
- http://www.debian.org/security/2017/dsa-3919Third Party Advisory
- http://www.debian.org/security/2017/dsa-3954Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/99842Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038931Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:1789Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1790Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1791Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1792Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2424Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2469Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2481Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2530Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3453Third Party Advisory
- https://cert.vde.com/en-us/advisories/vde-2017-002Third Party Advisory
- https://security.gentoo.org/glsa/201709-22Third Party Advisory
- https://security.netapp.com/advisory/ntap-20170720-0001/Third Party Advisory
- http://www.debian.org/security/2017/dsa-3919Third Party Advisory
- http://www.debian.org/security/2017/dsa-3954Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/99842Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038931Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:1789Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1790Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1791Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1792Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2424Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2469Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2481Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2530Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.