CVE-2018-3150 — Corporation Java vulnerability

8 documents8 sources

Severity

3.7LOWNVD

EPSS

0.8%

top 26.22%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Corporation Java Oracle JDK Oracle JRE

Timeline

PublishedOct 17

Latest updateMay 13

Description

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., c…

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:NExploitability: 2.2 | Impact: 1.4

Affected Packages3 packages

▶CVEListV5oracle_corporation/javaJava SE: 11

▶NVDoracle/jdk11.0.0

▶NVDoracle/jre11.0.0

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-ggpf-m8c3-75p7: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility)↗2022-05-13

▶

CVEList

CVE-2018-3150: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility)↗2018-10-17

▶

OSV

CVE-2018-3150: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility)↗2018-10-17

▶

📋Vendor Advisories

Ubuntu

OpenJDK vulnerabilities↗2018-10-30

▶

Red Hat

OpenJDK: Multi-Release attribute read from outside of the main manifest attributes (Utility, 8199171)↗2018-10-16

▶

Debian

CVE-2018-3150: openjdk-11 - Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility)...↗2018

▶

💬Community

Bugzilla

CVE-2018-3150 OpenJDK: Multi-Release attribute read from outside of the main manifest attributes (Utility, 8199171)↗2018-10-24

▶