CVE-2011-3551
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE...
9.3 HighFix available
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Exploit likelihood
4.55%Up 1.1 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
- Record
CVE-2011-3551- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
- Record
CVE-2011-3551- Updated
- 2026-11-02
EUVDEUVD-2011-3514 No score
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
- Record
EUVD-2011-3514- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hf9g-qf2v-h32m No score
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE...
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
- Record
GHSA-hf9g-qf2v-h32m- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openjdk-6Debian:6.0 |
before 6b18-1.8.10-0+squeeze2, plus listed versions 6b18-1.8.10-0+squeeze16b18-1.8.10-0~lenny16b18-1.8.10-0~lenny26b18-1.8.3-26b18-1.8.3-2+squeeze1 Show 11 moreShow less6b18-1.8.4-16b18-1.8.5-16b18-1.8.7-16b18-1.8.7-26b18-1.8.7-2~lenny16b18-1.8.7-2~squeeze16b18-1.8.7-36b18-1.8.7-46b18-1.8.7-56b18-1.8.9-0.16b18-1.8.9-0.1~squeeze1 |
6b18-1.8.10-0+squeeze2 |
openjdk-6Debian:5.0 |
before 6b18-1.8.10-0~lenny2, plus listed versions 6b11-9.16b11-9.1+lenny26b12-06b12-1~exp16b12~pre1-0 Show 45 moreShow less6b12~pre2-16b14-1.5~pre1-16b14-1.5~pre1-26b14-1.5~pre1-36b14-1.5~pre1-46b14-1.5~pre1-56b14-1~exp16b16-16b16-1.6-16b16-1.6.1-16b16-1.6.1-26b16-1.6~pre2-16b16-26b16-36b16-46b17-1.7-16b17-1.7-1+sh4.16b17~pre3-16b17~pre3-1+sh46b17~pre3-1+sh4.16b18-1.8-16b18-1.8-26b18-1.8-36b18-1.8-46b18-1.8.1-16b18-1.8.1-26b18-1.8.10-0~lenny16b18-1.8.2-16b18-1.8.2-26b18-1.8.2-36b18-1.8.2-46b18-1.8.3-16b18-1.8.3-26b18-1.8.3-2+squeeze16b18-1.8.3-2~lenny16b18-1.8.4-16b18-1.8.5-16b18-1.8.7-16b18-1.8.7-26b18-1.8.7-2~lenny16b18-1.8.7-2~squeeze16b18-1.8.7-36b18-1.8.7-46b18-1.8.7-56b18-1.8.9-0.1 |
6b18-1.8.10-0~lenny2 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
Show 68 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.40.1.9.10.el6_1 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.40.1.9.10.el6_1 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.40.1.9.10.el6_1 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.40.1.9.10.el6_1 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.40.1.9.10.el6_1 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.40.1.9.10.el6_1 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
java-1.6.0-sunRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-demoRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-develRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-srcRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-ibmRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el5 |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el5 |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el6 |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el6 |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-3551 is a high vulnerability (CVSS 9.3) in Oracle Jrockit, published October 19, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.55%, the 91st percentile. Fixed in openjdk-6 6b18-1.8.10-0+squeeze2.
References
security.gentoo.org/glsa/glsa-201406-32.xml
marc.info?l=bugtraq&m=134254866602253&w=2
secunia.com/advisories/48308
lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html
rhn.redhat.com/errata/RHSA-2013-1455.html
Show 194 moreShow less
redhat.com/support/errata/RHSA-2011-1384.html
securityfocus.com/bid/50224
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14318
oracle.com/technetwork/topics/security/javacpuoct2011-443431.html
exchange.xforce.ibmcloud.com/vulnerabilities/70842
securitytracker.com/id?1026215
ubuntu.com/usn/USN-1263-1
ibm.com/developerworks/java/jdk/alerts
nvd.nist.gov/vuln/detail/CVE-2011-3551
github.com/advisories/GHSA-hf9g-qf2v-h32m
access.redhat.com/errata/RHSA-2011:1380
icedtea.classpath.org/hg/release/icedtea6-1.9/file/328afd896e3e/NEWS
bugzilla.redhat.com/show_bug.cgi?id=737506
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1380.json
cve.org/CVERecord?id=CVE-2011-3389
cisa.gov/known-exploited-vulnerabilities-catalog
xforce.iss.net/xforce/xfdb/78764
isg.rhul.ac.uk/tls
openssl.org/news/secadv_20130205.txt
polarssl.org/tech-updates/releases/polarssl-1.2.5-released
kb.cert.org/vuls/id/225657
This page doesn't list everything
Left out here: 8 versions and 479 references. The JSON record has them.