CVE-2011-0864
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6...
10.0 High
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot.
Exploit likelihood
3.04%Up 0.4 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot.
- Record
CVE-2011-0864- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot.
- Record
CVE-2011-0864- Updated
- 2026-11-02
EUVDEUVD-2011-0876 No score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot.
- Record
EUVD-2011-0876- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w7mv-ff4v-6j3q No score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6...
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot.
- Record
GHSA-w7mv-ff4v-6j3q- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openjdk-6Debian:6.0 From an advisory covering 7 CVEs |
before 6b18-1.8.9-0.1~squeeze1, plus listed versions 6b18-1.8.3-26b18-1.8.3-2+squeeze16b18-1.8.4-16b18-1.8.5-16b18-1.8.7-1 Show 6 moreShow less6b18-1.8.7-26b18-1.8.7-2~lenny16b18-1.8.7-2~squeeze16b18-1.8.7-36b18-1.8.7-46b18-1.8.7-5 |
6b18-1.8.9-0.1~squeeze1 |
openjdk-6Debian:5.0 From an advisory covering 19 CVEs |
before 6b18-1.8.10-0~lenny2, plus listed versions 6b11-9.16b11-9.1+lenny26b12-06b12-1~exp16b12~pre1-0 Show 45 moreShow less6b12~pre2-16b14-1.5~pre1-16b14-1.5~pre1-26b14-1.5~pre1-36b14-1.5~pre1-46b14-1.5~pre1-56b14-1~exp16b16-16b16-1.6-16b16-1.6.1-16b16-1.6.1-26b16-1.6~pre2-16b16-26b16-36b16-46b17-1.7-16b17-1.7-1+sh4.16b17~pre3-16b17~pre3-1+sh46b17~pre3-1+sh4.16b18-1.8-16b18-1.8-26b18-1.8-36b18-1.8-46b18-1.8.1-16b18-1.8.1-26b18-1.8.10-0~lenny16b18-1.8.2-16b18-1.8.2-26b18-1.8.2-36b18-1.8.2-46b18-1.8.3-16b18-1.8.3-26b18-1.8.3-2+squeeze16b18-1.8.3-2~lenny16b18-1.8.4-16b18-1.8.5-16b18-1.8.7-16b18-1.8.7-26b18-1.8.7-2~lenny16b18-1.8.7-2~squeeze16b18-1.8.7-36b18-1.8.7-46b18-1.8.7-56b18-1.8.9-0.1 |
6b18-1.8.10-0~lenny2 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::server From an advisory covering 7 CVEs |
before 1:1.6.0.0-1.39.1.9.8.el6_1 | 1:1.6.0.0-1.39.1.9.8.el6_1 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 7 CVEs |
before 1:1.6.0.0-1.39.1.9.8.el6_1 | 1:1.6.0.0-1.39.1.9.8.el6_1 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::server From an advisory covering 7 CVEs |
before 1:1.6.0.0-1.39.1.9.8.el6_1 | 1:1.6.0.0-1.39.1.9.8.el6_1 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::server From an advisory covering 7 CVEs |
before 1:1.6.0.0-1.39.1.9.8.el6_1 | 1:1.6.0.0-1.39.1.9.8.el6_1 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::server From an advisory covering 7 CVEs |
before 1:1.6.0.0-1.39.1.9.8.el6_1 | 1:1.6.0.0-1.39.1.9.8.el6_1 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::server From an advisory covering 7 CVEs |
before 1:1.6.0.0-1.39.1.9.8.el6_1 | 1:1.6.0.0-1.39.1.9.8.el6_1 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 1:1.6.0.0-1.22.1.9.8.el5_6 | 1:1.6.0.0-1.22.1.9.8.el5_6 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 1:1.6.0.0-1.22.1.9.8.el5_6 | 1:1.6.0.0-1.22.1.9.8.el5_6 |
Show 28 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 1:1.6.0.0-1.22.1.9.8.el5_6 | 1:1.6.0.0-1.22.1.9.8.el5_6 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 1:1.6.0.0-1.22.1.9.8.el5_6 | 1:1.6.0.0-1.22.1.9.8.el5_6 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 1:1.6.0.0-1.22.1.9.8.el5_6 | 1:1.6.0.0-1.22.1.9.8.el5_6 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 1:1.6.0.0-1.22.1.9.8.el5_6 | 1:1.6.0.0-1.22.1.9.8.el5_6 |
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el4 | 1:1.6.0.26-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el4 | 1:1.6.0.26-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el4 | 1:1.6.0.26-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el4 | 1:1.6.0.26-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el4 | 1:1.6.0.26-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el4 | 1:1.6.0.26-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el5 | 1:1.6.0.26-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el5 | 1:1.6.0.26-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el5 | 1:1.6.0.26-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el5 | 1:1.6.0.26-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el5 | 1:1.6.0.26-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el5 | 1:1.6.0.26-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el5 | 1:1.6.0.26-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el5 | 1:1.6.0.26-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el5 | 1:1.6.0.26-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el5 | 1:1.6.0.26-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el5 | 1:1.6.0.26-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el5 | 1:1.6.0.26-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:6 From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el6 | 1:1.6.0.26-1jpp.1.el6 |
java-1.6.0-sun-demoRed Hat:rhel_extras:6 From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el6 | 1:1.6.0.26-1jpp.1.el6 |
java-1.6.0-sun-develRed Hat:rhel_extras:6 From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el6 | 1:1.6.0.26-1jpp.1.el6 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:6 From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el6 | 1:1.6.0.26-1jpp.1.el6 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:6 From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el6 | 1:1.6.0.26-1jpp.1.el6 |
java-1.6.0-sun-srcRed Hat:rhel_extras:6 From an advisory covering 11 CVEs |
before 1:1.6.0.26-1jpp.1.el6 | 1:1.6.0.26-1jpp.1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-0864 is a high vulnerability (CVSS 10.0) in Sun Jre, published June 14, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.04%, the 87th percentile. No source names a fixed version.
References
hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-015/index.html
security.gentoo.org/glsa/glsa-201406-32.xml
marc.info?l=bugtraq&m=134254866602253&w=2
debian.org/security/2011/dsa-2311
support.avaya.com/css/P8/documents/100144512
oracle.com/technetwork/topics/security/javacpujune2011-313339.html
Show 65 moreShow less
secunia.com/advisories/44818
redhat.com/support/errata/RHSA-2011-0856.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14225
mandriva.com/security/advisories?name=MDVSA-2011:126
lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html
ibm.com/developerworks/java/jdk/alerts
nvd.nist.gov/vuln/detail/CVE-2011-0864
github.com/advisories/GHSA-w7mv-ff4v-6j3q
access.redhat.com/errata/RHSA-2011:0856
bugzilla.redhat.com/show_bug.cgi?id=706106
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0856.json
cve.org/CVERecord?id=CVE-2011-0862
This page doesn't list everything
Left out here: 8 versions. The JSON record has them.