PT-2017-11109 · Oracle+4 · Java Se Embedded+6

Publicado

2017-07-20

·

Atualizado

2024-06-15

·

CVE-2017-10111

CVSS v3.1

9.6

Crítica

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Java SE version 8u131 Java SE Embedded version 8u131
Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE and Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. This issue can result in the takeover of Java SE and Java SE Embedded. It applies to Java deployments that load and run untrusted code, such as sandboxed Java Web Start applications or sandboxed Java applets, and rely on the Java sandbox for security.
Recommendations For Java SE version 8u131, update to a version that fixes this issue. For Java SE Embedded version 8u131, update to a version that fixes this issue. As a temporary workaround, consider restricting the use of sandboxed Java Web Start applications or sandboxed Java applets that load and run untrusted code until a patch is available.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CESA-2017_1789
CVE-2017-10111
DSA-3919-1
MGASA-2017-0233
OPENSUSE-SU-2018_0042-1
OPENSUSE-SU-2024:10876-1
RHSA-2017:1789
RHSA-2017:1790
RHSA-2017_1789
RHSA-2017_1790
SUSE-SU-2017:2175-1
SUSE-SU-2017:2263-1
SUSE-SU-2017:2280-1
SUSE-SU-2017:2281-1
SUSE-SU-2018:0005-1
USN-3366-1
USN-3366-2

Produtos afetados

Centos
Java Platform
Java Se
Java Se Embedded
Red Hat
Suse
Ubuntu