CVE-2018-3150
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported...
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
- Record
CVE-2018-3150- CVSS 3.0
- 3.7 Low
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
- Record
CVE-2018-3150- Updated
- 2026-11-02
EUVDEUVD-2018-15005 No score
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
- Record
EUVD-2018-15005- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ggpf-m8c3-75p7
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported...
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
- Record
GHSA-ggpf-m8c3-75p7- CVSS 3.0
- 3.7 Low
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSV
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
- Record
CVE-2018-3150- CVSS 3.0
- 3.7 Low
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2018-3150
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
- Record
DEBIAN-CVE-2018-3150- CVSS 3.0
- 3.7 Low
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
Show 6 moreShow less
OSVRHSA-2018:3521
Red Hat Security Advisory: java-11-openjdk security update
- Record
RHSA-2018:3521- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-3150
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
- Record
UBUNTU-CVE-2018-3150- CVSS 3.0
- 3.7 Low
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10871-1 No score
java-11-openjdk-11.0.12.0-3.1 on GA media
These are all security issues fixed in the java-11-openjdk-11.0.12.0-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10871-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10872-1 No score
java-13-openjdk-13.0.8.0-3.1 on GA media
These are all security issues fixed in the java-13-openjdk-13.0.8.0-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10872-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10873-1 No score
java-15-openjdk-15.0.4.0-2.1 on GA media
These are all security issues fixed in the java-15-openjdk-15.0.4.0-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10873-1- Updated
- 2026-11-02
OSVUSN-3804-1 No score
openjdk-8, openjdk-lts vulnerabilities
It was discovered that the Security component of OpenJDK did not properly ensure that manifest elements were signed before use. An attacker could possibly use this to specially construct an untrusted Java application or applet that could escape sandbox restrictions. (CVE-2018-3136)
Artem Smotrakov discovered that the HTTP client redirection handler implementation in OpenJDK did not clear potentially sensitive information in HTTP headers when following redirections to different hosts. An attacker could use this to expose sensitive information. (CVE-2018-3139)
It was discovered that the Java Naming and Directory Interface (JNDI) implementation in OpenJDK did not properly enforce restrictions specified by system properties in some situations. An attacker could potentially use this to execute arbitrary code. (CVE-2018-3149)
It was discovered that the Utility component of OpenJDK did not properly ensure all attributes in a JAR were signed before use. An attacker could use this to specially construct an untrusted Java application or applet that could escape sandbox restrictions. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-3150)
It was discovered that the Hotspot component of OpenJDK did not properly perform access checks in certain cases when performing field link resolution. An attacker could use this to specially construct an untrusted Java application or applet that could escape sandbox restrictions. (CVE-2018-3169)
Felix Dörre discovered that the Java Secure Socket Extension (JSSE) implementation in OpenJDK did not ensure that the same endpoint identification algorithm was used during TLS session resumption as during initial session setup. An attacker could use this to expose sensitive information. (CVE-2018-3180)
Krzysztof Szafrański discovered that the Scripting component did not properly restrict access to the scripting engine in some situations. An attacker could use this to specially construct an untrusted Java application or applet that could escape sandbox restrictions. (CVE-2018-3183)
Tobias Ospelt discovered that the Resource Interchange File Format (RIFF) reader implementation in OpenJDK contained an infinite loop. An attacker could use this to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2018-3214)
- Record
USN-3804-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openjdk-11Debian:11 |
before 11.0.1+13-1 | 11.0.1+13-1 |
java-11-openjdkRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-headlessRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-debugRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-demoRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-demo-debugRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-develRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-devel-debugRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-headless-debugRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
Show 65 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-11-openjdk-javadocRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-javadoc-debugRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-javadoc-zipRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-javadoc-zip-debugRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-jmodsRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-jmods-debugRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-srcRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-src-debugRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdkRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-headlessRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-demoRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-demo-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-develRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-devel-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-headless-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-javadocRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-javadoc-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-javadoc-zipRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-javadoc-zip-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-jmodsRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-jmods-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-srcRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-src-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdkRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-develRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-headlessRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-debugRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-demoRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-demo-debugRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-devel-debugRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-headless-debugRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-javadocRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-javadoc-debugRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-javadoc-zipRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-javadoc-zip-debugRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-jmodsRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-jmods-debugRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-srcRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-src-debugRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdkRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-develRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-headlessRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-demoRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-demo-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-devel-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-headless-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-javadocRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-javadoc-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-javadoc-zipRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-javadoc-zip-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-jmodsRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-jmods-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-srcRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
java-11-openjdk-src-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.1.13-3.el7_6 | 1:11.0.1.13-3.el7_6 |
openjdk-ltsUbuntu:18.04:LTS |
before 10.0.2+13-1ubuntu0.18.04.3, plus listed versions 9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu210.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.2 |
10.0.2+13-1ubuntu0.18.04.3 |
openjdk-8Ubuntu:16.04:LTS From an advisory covering 8 CVEs |
before 8u181-b13-1ubuntu0.16.04.1, plus listed versions 8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1 Show 18 moreShow less8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.1 |
8u181-b13-1ubuntu0.16.04.1 |
openjdk-ltsUbuntu:18.04:LTS From an advisory covering 8 CVEs |
before 10.0.2+13-1ubuntu0.18.04.3, plus listed versions 9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu210.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.2 |
10.0.2+13-1ubuntu0.18.04.3 |
java-11-openjdkopenSUSE:Tumbleweed From an advisory covering 95 CVEs |
before 11.0.12.0-3.1 | 11.0.12.0-3.1 |
java-13-openjdkopenSUSE:Tumbleweed From an advisory covering 95 CVEs |
before 13.0.8.0-3.1 | 13.0.8.0-3.1 |
java-15-openjdkopenSUSE:Tumbleweed From an advisory covering 48 CVEs |
before 15.0.4.0-2.1 | 15.0.4.0-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-3150 is a low vulnerability (CVSS 3.7) in Oracle Corporation Java, published October 16, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.76%, the 86th percentile. Fixed in openjdk-11 11.0.1+13-1.
References
security.netapp.com/advisory/ntap-20181018-0001
securityfocus.com/bid/105597
usn.ubuntu.com/3804-1
oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
securitytracker.com/id/1041889
access.redhat.com/errata/RHSA-2018:3521
Show 137 moreShow less
security.gentoo.org/glsa/201908-10
nvd.nist.gov/vuln/detail/CVE-2018-3150
github.com/advisories/GHSA-ggpf-m8c3-75p7
security-tracker.debian.org/tracker/CVE-2018-3150
bugzilla.redhat.com/show_bug.cgi?id=1639268
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3521.json
cve.org/CVERecord?id=CVE-2018-3136
ubuntu.com/security/CVE-2018-3150
suse.com/security/cve/CVE-2018-11212