CVE-2011-3558
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE...
5.0 MediumFix available
CVE-2011-3558 is a medium vulnerability (CVSS 5.0) in Sun Jdk, published October 19, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.48%, the 84th percentile. Fixed in java-1.6.0-openjdk 1:1.6.0.0-1.23.1.9.10.el5_7.
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to HotSpot.
Exploit likelihood
2.48%Down 0.2 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to HotSpot.
- Record
CVE-2011-3558- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to HotSpot.
- Record
CVE-2011-3558- Updated
- 2026-11-02
EUVDEUVD-2011-3521 No score
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to HotSpot.
- Record
EUVD-2011-3521- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jhv3-7w8g-g3x5 No score
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE...
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to HotSpot.
- Record
GHSA-jhv3-7w8g-g3x5- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-openjdkRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
Show 32 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.40.1.9.10.el6_1 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.40.1.9.10.el6_1 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.40.1.9.10.el6_1 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.40.1.9.10.el6_1 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.40.1.9.10.el6_1 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.40.1.9.10.el6_1 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
java-1.6.0-sunRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-demoRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-develRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-srcRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
security.gentoo.org/glsa/glsa-201406-32.xml
marc.info?l=bugtraq&m=134254866602253&w=2
securityfocus.com/bid/50242
secunia.com/advisories/48308
redhat.com/support/errata/RHSA-2011-1384.html
Show 93 moreShow less
oracle.com/technetwork/topics/security/javacpuoct2011-443431.html
osvdb.org/76510
securitytracker.com/id?1026215
ubuntu.com/usn/USN-1263-1
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13475
ibm.com/developerworks/java/jdk/alerts
exchange.xforce.ibmcloud.com/vulnerabilities/70835
nvd.nist.gov/vuln/detail/CVE-2011-3558
github.com/advisories/GHSA-jhv3-7w8g-g3x5
access.redhat.com/errata/RHSA-2011:1380
icedtea.classpath.org/hg/release/icedtea6-1.9/file/328afd896e3e/NEWS
bugzilla.redhat.com/show_bug.cgi?id=737506
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1380.json
cve.org/CVERecord?id=CVE-2011-3389
cisa.gov/known-exploited-vulnerabilities-catalog