CVE-2017-10198
published 2017-08-08CVE-2017-10198: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE…
PriorityP336medium6.8CVSS 3.1
AVNACHPRNUINSCCHINAN
EPSS
2.60%
83.6th percentile
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).
Affected
43 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | openjdk-8 | < openjdk-8 8u141-b15-1 (sid) | openjdk-8 8u141-b15-1 (sid) |
| netapp | active_iq_unified_manager | >= 7.3 | — |
| netapp | active_iq_unified_manager | >= 9.5 | — |
| netapp | e-series_santricity_os_controller | 11.0 – 11.70.1 | — |
| netapp | oncommand_unified_manager | <= 7.1 | — |
| netapp | storage_replication_adapter_for_clustered_data_ontap | — | — |
| netapp | storage_replication_adapter_for_clustered_data_ontap | >= 7.2 | — |
| netapp | vasa_provider_for_clustered_data_ontap | — | — |
| netapp | vasa_provider_for_clustered_data_ontap | >= 7.2 | — |
| netapp | virtual_storage_console | — | — |
| netapp | virtual_storage_console | >= 7.2 | — |
| oracle | jdk | — | — |
| oracle | jdk | — | — |
| oracle | jdk | — | — |
| oracle | jre | — | — |
| oracle | jre | — | — |
| oracle | jre | — | — |
| oracle | jrockit | — | — |
| oracle_corporation | java | — | — |
| oracle_corporation | java | — | — |
| oracle_corporation | java | — | — |
| phoenixcontact | fl_mguard_dm | <= 1.8.0 | — |
| redhat | enterprise_linux_desktop | — | — |
CVSS provenance
nvdv3.16.8MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
osv6.8MEDIUM
vendor_debian6.8MEDIUM
vendor_redhat6.8MEDIUM
vendor_ubuntu5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7wr2-pqjw-h272: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security)
ghsa_unreviewed·2022-05-13
CVE-2017-10198 [MEDIUM] GHSA-7wr2-pqjw-h272: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security)
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can
OSV
openjdk-8 regression
osv·2017-07-31·CVSS 5.3
[MEDIUM] openjdk-8 regression
openjdk-8 regression
USN-3366-1 fixed vulnerabilities in OpenJDK 8. Unfortunately, that
update introduced a regression that caused some valid JAR files to
fail validation. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that the JPEGImageReader class in OpenJDK would
incorrectly read unused image data. An attacker could use this to
specially construct a jpeg image file that when opened by a Java
application would cause a denial of service. (CVE-2017-10053)
It was discovered that the JAR verifier in OpenJDK did not properly
handle archives containing files missing digests. An attacker could
use this to modify the signed contents of a JAR file. (CVE-2017-10067)
It was discovered that integer overflows existed in the Hotspo
OSV
openjdk-8 vulnerabilities
osv·2017-07-26·CVSS 5.3
CVE-2017-10053 [MEDIUM] openjdk-8 vulnerabilities
openjdk-8 vulnerabilities
It was discovered that the JPEGImageReader class in OpenJDK would
incorrectly read unused image data. An attacker could use this to
specially construct a jpeg image file that when opened by a Java
application would cause a denial of service. (CVE-2017-10053)
It was discovered that the JAR verifier in OpenJDK did not properly
handle archives containing files missing digests. An attacker could
use this to modify the signed contents of a JAR file. (CVE-2017-10067)
It was discovered that integer overflows existed in the Hotspot
component of OpenJDK when generating range check loop predicates. An
attacker could use this to specially construct an untrusted Java
application or applet that could escape sandbox restrictions
and cause a denial of service or possibly exec
OSV
CVE-2017-10198: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security)
osv·2017-07-20·CVSS 6.8
CVE-2017-10198 [MEDIUM] CVE-2017-10198: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security)
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can
CISA ICS
PHOENIX CONTACT mGuard Device Manager
cisa_ics·2017-09-19
PHOENIX CONTACT mGuard Device Manager
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
PHOENIX CONTACT mGuard Device Manager
Last RevisedSeptember 19, 2017
Alert CodeICSA-17-262-01
## CVSS v3 9.0
ATTENTION: Remotely exploitable/low skill level to exploit.
Vendor: PHOENIX CONTACT
Equipment: mGuard Device Manager
Vulnerabilities: Improper Access Control vulnerabilities for Oracle Java SE
## AFFECTED PRODUCTS
The following versions of mGuard Device Manager, a device management software for mGuard devices, are affected:
- mGuard Device Manager 1.8.0 and older.
## IMPACT
Successful exploitation of these vulnerabilities could allow unauthorized remote access, mo
Ubuntu
OpenJDK 8 regression
vendor_ubuntu·2017-07-31·CVSS 5.3
[MEDIUM] OpenJDK 8 regression
Title: OpenJDK 8 regression
Summary: USN 3366-1 introduced a regression in OpenJDK 8.
USN-3366-1 fixed vulnerabilities in OpenJDK 8. Unfortunately, that
update introduced a regression that caused some valid JAR files to
fail validation. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that the JPEGImageReader class in OpenJDK would
incorrectly read unused image data. An attacker could use this to
specially construct a jpeg image file that when opened by a Java
application would cause a denial of service. (CVE-2017-10053)
It was discovered that the JAR verifier in OpenJDK did not properly
handle archives containing files missing digests. An attacker could
use this to modify the signed contents of a JAR file. (CVE-2017-1006
Ubuntu
OpenJDK 8 vulnerabilities
vendor_ubuntu·2017-07-26·CVSS 5.3
CVE-2017-10053 [MEDIUM] OpenJDK 8 vulnerabilities
Title: OpenJDK 8 vulnerabilities
Summary: Several security issues were fixed in OpenJDK 8.
It was discovered that the JPEGImageReader class in OpenJDK would
incorrectly read unused image data. An attacker could use this to
specially construct a jpeg image file that when opened by a Java
application would cause a denial of service. (CVE-2017-10053)
It was discovered that the JAR verifier in OpenJDK did not properly
handle archives containing files missing digests. An attacker could
use this to modify the signed contents of a JAR file. (CVE-2017-10067)
It was discovered that integer overflows existed in the Hotspot
component of OpenJDK when generating range check loop predicates. An
attacker could use this to specially construct an untrusted Java
application or applet that could escape s
Red Hat
OpenJDK: incorrect enforcement of certificate path restrictions (Security, 8179998)
vendor_redhat·2017-07-18·CVSS 6.8
CVE-2017-10198 [MEDIUM] OpenJDK: incorrect enforcement of certificate path restrictions (Security, 8179998)
OpenJDK: incorrect enforcement of certificate path restrictions (Security, 8179998)
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be explo
Debian
CVE-2017-10198: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java...
vendor_debian·2017·CVSS 6.8
CVE-2017-10198 [MEDIUM] CVE-2017-10198: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java...
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2017-10198 OpenJDK: incorrect enforcement of certificate path restrictions (Security, 8179998)
bugzilla·2017-07-18·CVSS 6.8
CVE-2017-10198 [MEDIUM] CVE-2017-10198 OpenJDK: incorrect enforcement of certificate path restrictions (Security, 8179998)
CVE-2017-10198 OpenJDK: incorrect enforcement of certificate path restrictions (Security, 8179998)
It was discovered that the Security component of OpenJDK could fail to properly enforce restrictions (specified using the jdk.certpath.disabledAlgorithms security property) defined for processing of X.509 certificate chains. A remote attacker could possibly use this flaw to make Java accept certificate using one of the disabled algorithms.
Discussion:
Public now via Oracle CPU July 2017:
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA
The issue was fixed in Oracle JDK 8u141, 7u151, and 6u161.
---
OpenJDK-8 upstream commit:
http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/276269460238
---
This issue has been addressed in the following products:
Bugzilla
CVE-2016-10198 gstreamer-plugins-good: Invalid memory read in gst_aac_parse_sink_setcaps
bugzilla·2017-02-06·CVSS 5.5
CVE-2016-10198 [MEDIUM] CVE-2016-10198 gstreamer-plugins-good: Invalid memory read in gst_aac_parse_sink_setcaps
CVE-2016-10198 gstreamer-plugins-good: Invalid memory read in gst_aac_parse_sink_setcaps
An invalid memory read in gst_aac_parse_sink_setcaps was found that can be triggered by specially crafted file.
Upstream bug:
https://bugzilla.gnome.org/show_bug.cgi?id=775450
Upstream patch:
https://github.com/GStreamer/gst-plugins-good/commit/87a2c140ca54c5128093377e9b25a5c24b346727
CVE assignment:
http://seclists.org/oss-sec/2017/q1/284
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:2060 https://access.redhat.com/errata/RHSA-2017:2060
http://www.debian.org/security/2017/dsa-3919http://www.debian.org/security/2017/dsa-3954http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlhttp://www.securityfocus.com/bid/99818http://www.securitytracker.com/id/1038931https://access.redhat.com/errata/RHSA-2017:1789https://access.redhat.com/errata/RHSA-2017:1790https://access.redhat.com/errata/RHSA-2017:1791https://access.redhat.com/errata/RHSA-2017:1792https://access.redhat.com/errata/RHSA-2017:3392https://cert.vde.com/en-us/advisories/vde-2017-002https://security.gentoo.org/glsa/201709-22https://security.netapp.com/advisory/ntap-20170720-0001/http://www.debian.org/security/2017/dsa-3919http://www.debian.org/security/2017/dsa-3954http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlhttp://www.securityfocus.com/bid/99818http://www.securitytracker.com/id/1038931https://access.redhat.com/errata/RHSA-2017:1789https://access.redhat.com/errata/RHSA-2017:1790https://access.redhat.com/errata/RHSA-2017:1791https://access.redhat.com/errata/RHSA-2017:1792https://access.redhat.com/errata/RHSA-2017:3392https://cert.vde.com/en-us/advisories/vde-2017-002https://security.gentoo.org/glsa/201709-22https://security.netapp.com/advisory/ntap-20170720-0001/
2017-08-08
Published