Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: Applies to the Java SE Kerberos client. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Jdk | Oracle | 1.6.0-update161 (including) | 1.6.0-update161 (including) |
| Jdk | Oracle | 1.7.0-update151 (including) | 1.7.0-update151 (including) |
| Jdk | Oracle | 1.8.0-update144 (including) | 1.8.0-update144 (including) |
| Jdk | Oracle | 1.9.0 (including) | 1.9.0 (including) |
| Jre | Oracle | 1.6.0-update161 (including) | 1.6.0-update161 (including) |
| Jre | Oracle | 1.7.0-update151 (including) | 1.7.0-update151 (including) |
| Jre | Oracle | 1.8.0-update144 (including) | 1.8.0-update144 (including) |
| Jre | Oracle | 1.9.0 (including) | 1.9.0 (including) |
| Oracle Java for Red Hat Enterprise Linux 6 | RedHat | java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6 | * |
| Oracle Java for Red Hat Enterprise Linux 6 | RedHat | java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6 | * |
| Oracle Java for Red Hat Enterprise Linux 6 | RedHat | java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6 | * |
| Oracle Java for Red Hat Enterprise Linux 7 | RedHat | java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7 | * |
| Oracle Java for Red Hat Enterprise Linux 7 | RedHat | java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7 | * |
| Oracle Java for Red Hat Enterprise Linux 7 | RedHat | java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7 | * |
| Red Hat Enterprise Linux 6 | RedHat | java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9 | * |
| Red Hat Enterprise Linux 6 | RedHat | java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9 | * |
| Red Hat Enterprise Linux 6 Supplementary | RedHat | java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9 | * |
| Red Hat Enterprise Linux 6 Supplementary | RedHat | java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9 | * |
| Red Hat Enterprise Linux 7 | RedHat | java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4 | * |
| Red Hat Enterprise Linux 7 | RedHat | java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4 | * |
| Red Hat Enterprise Linux 7 Supplementary | RedHat | java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7 | * |
| Red Hat Enterprise Linux 7 Supplementary | RedHat | java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7 | * |
| Red Hat Satellite 5.8 | RedHat | java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9 | * |
| Red Hat Satellite 5.8 ELS | RedHat | java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9 | * |
| Openjdk-6 | Ubuntu | trusty | * |
| Openjdk-6 | Ubuntu | upstream | * |
| Openjdk-7 | Ubuntu | trusty | * |
| Openjdk-7 | Ubuntu | upstream | * |
| Openjdk-8 | Ubuntu | artful | * |
| Openjdk-8 | Ubuntu | upstream | * |
| Openjdk-8 | Ubuntu | xenial | * |
| Openjdk-8 | Ubuntu | zesty | * |
| Openjdk-9 | Ubuntu | artful | * |
| Openjdk-9 | Ubuntu | esm-apps/xenial | * |
| Openjdk-9 | Ubuntu | upstream | * |
| Openjdk-9 | Ubuntu | xenial | * |
| Openjdk-9 | Ubuntu | zesty | * |