CVE-2010-3561
Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update...
7.5 High
Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this involves the use of the privileged accept method in the ServerSocket class, which does not limit which hosts can connect and allows remote attackers to bypass intended network access restrictions.
Exploit likelihood
3.36%Down 1.0 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this involves the use of the privileged accept method in the ServerSocket class, which does not limit which hosts can connect and allows remote attackers to bypass intended network access restrictions.
- Record
CVE-2010-3561- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this involves the use of the privileged accept method in the ServerSocket class, which does not limit which hosts can connect and allows remote attackers to bypass intended network access restrictions.
- Record
CVE-2010-3561- Updated
- 2026-11-02
EUVDEUVD-2010-3557 No score
Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this involves the use of the privileged accept method in the ServerSocket class, which does not limit which hosts can connect and allows remote attackers to bypass intended network access restrictions.
- Record
EUVD-2010-3557- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jmhr-w45r-wv9q No score
Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update...
Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this involves the use of the privileged accept method in the ServerSocket class, which does not limit which hosts can connect and allows remote attackers to bypass intended network access restrictions.
- Record
GHSA-jmhr-w45r-wv9q- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-openjdkRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
Show 44 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el4 | 1:1.6.0.22-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el4 | 1:1.6.0.22-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el4 | 1:1.6.0.22-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el4 | 1:1.6.0.22-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el4 | 1:1.6.0.22-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el4 | 1:1.6.0.22-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::computenode From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::computenode From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::computenode From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::computenode From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::workstation From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::workstation From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::workstation From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::workstation From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3561 is a high vulnerability (CVSS 7.5) in Sun Jdk, published October 19, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.36%, the 88th percentile. No source names a fixed version.
References
support.avaya.com/css/P8/documents/100114327
redhat.com/support/errata/RHSA-2010-0865.html
security.gentoo.org/glsa/glsa-201406-32.xml
marc.info?l=bugtraq&m=134254866602253&w=2
Show 150 moreShow less
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748
lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html
securityfocus.com/bid/44013
ubuntu.com/usn/USN-1010-1
bugzilla.redhat.com/show_bug.cgi?id=639880
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12200
oracle.com/technetwork/topics/security/javacpuoct2010-176258.html
hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html
vmware.com/security/advisories/VMSA-2011-0003.html
secunia.com/advisories/42974
vupen.com/english/advisories/2010/3086
lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
nvd.nist.gov/vuln/detail/CVE-2010-3561
github.com/advisories/GHSA-jmhr-w45r-wv9q
access.redhat.com/errata/RHSA-2010:0768
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0768.json
cve.org/CVERecord?id=CVE-2009-3555