Versio.io

CVE-2017-3533

Common vulnerabilities & exposures (CVE)

CVE databaseCVE database blogpostRelease & EoL database
 
Published at: - 24-04-2017 09:59
Last modified: - 13-05-2022 04:52
Total changes: - 2

Description

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via FTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).

Common Vulnerability Scoring System (CVSS)

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
High
Attack complexity
Network
Attack vector
None
Availability
None
Confidentiality
Low
Integrity
None
Privileges required
Unchanged
Scope
None
User interaction
3.7
Base score
2.2
1.4
Exploitability score
Impact score
 

Verification logic

OR
OR
vendor=oracle AND product=jrockit AND version=r28.3.13
vendor=oracle AND product=jre AND version=1.7.0 AND update=update_131
vendor=oracle AND product=jre AND version=1.8.0 AND update=update_121
vendor=oracle AND product=jdk AND version=1.8.0 AND update=update121
vendor=oracle AND product=jdk AND version=1.7.0 AND update=update131
vendor=oracle AND product=jdk AND version=1.6.0 AND update=update141
vendor=oracle AND product=jre AND version=1.6.0 AND update=update141
OR
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_desktop AND version=7.0
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_workstation AND version=7.0
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server AND version=7.0
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_desktop AND version=6.0
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server AND version=6.0
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_workstation AND version=6.0
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_tus AND version=7.3
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_aus AND version=7.3
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_aus AND version=7.4
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_eus AND version=7.3
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_tus AND version=7.6
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_aus AND version=7.6
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_eus AND version=7.5
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_eus AND version=7.6
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_eus AND version=7.4
vendor=Red Hat Enterprise Linux AND product=satellite AND version=5.8
OR
vendor=Red Hat Enterprise Linux AND product=icedtea AND versionEndExcluding=3.4.0
OR
vendor=Debian AND product=debian_linux AND version=8.0
 

Reference

 


Keywords

NVD

 

CVE-2017-3533

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures

 

We use cookies to ensure that we give you the best experience on our website. Read privacy policies for more information.