Versio.io

CVE-2017-3539

Common vulnerabilities & exposures (CVE)

CVE databaseCVE database blogpostRelease & EoL database
 
Published at: - 24-04-2017 09:59
Last modified: - 13-05-2022 04:52
Total changes: - 2

Description

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).

Common Vulnerability Scoring System (CVSS)

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
High
Attack complexity
Network
Attack vector
None
Availability
None
Confidentiality
Low
Integrity
None
Privileges required
Unchanged
Scope
Required
User interaction
3.1
Base score
1.6
1.4
Exploitability score
Impact score
 

Verification logic

OR
OR
vendor=oracle AND product=jre AND version=1.7.0 AND update=update_131
vendor=oracle AND product=jre AND version=1.8.0 AND update=update_121
vendor=oracle AND product=jdk AND version=1.8.0 AND update=update121
vendor=oracle AND product=jdk AND version=1.7.0 AND update=update131
vendor=oracle AND product=jdk AND version=1.6.0 AND update=update141
vendor=oracle AND product=jre AND version=1.6.0 AND update=update141
OR
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_desktop AND version=7.0
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_workstation AND version=7.0
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server AND version=7.0
vendor=Debian AND product=debian_linux AND version=8.0
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_desktop AND version=6.0
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server AND version=6.0
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_workstation AND version=6.0
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_tus AND version=7.3
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_aus AND version=7.3
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_aus AND version=7.4
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_tus AND version=7.6
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_eus AND version=7.3
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_eus AND version=7.4
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_eus AND version=7.5
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_eus AND version=7.6
vendor=Red Hat Enterprise Linux AND product=satellite AND version=5.8
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_aus AND version=7.6
OR
vendor=Red Hat Enterprise Linux AND product=icedtea AND versionEndExcluding=3.4.0
 

Reference

 


Keywords

NVD

 

CVE-2017-3539

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures

 

We use cookies to ensure that we give you the best experience on our website. Read privacy policies for more information.