{"id":"CVE-2018-2783","aliases":["EUVD-2018-14638","GHSA-36xm-wx7c-g2hq","RHSA-2018:0099","RHSA-2018:0100","RHSA-2018:1203","RHSA-2018:1205","RHSA-2018:1721","RHSA-2018:1722","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1974","RHSA-2018:1975","SUSE-SU-2018:1447-1","SUSE-SU-2018:1458-1","SUSE-SU-2018:1738-1","SUSE-SU-2018:1738-2","SUSE-SU-2018:1764-1","SUSE-SU-2018:1764-2","SUSE-SU-2018:2068-1","UBUNTU-CVE-2018-2783","USN-3644-1"],"status":"published","title":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).","severity":{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.0394,"percentile":0.90459,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2018-04-18T00:00:00Z","modified":"2026-06-29T10:21:06Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"openjdk-7","fixed_in":["7u171-2.6.13-0ubuntu0.14.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-8","fixed_in":["8u171-b11-0ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openjdk-8","fixed_in":["8u171-b11-0ubuntu0.18.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.1.el6_9"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.1.el6_9"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.1.el6_9"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.1.el6_9"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.1.el6_9"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.1.el6_9"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.2.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.2.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.2.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.2.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.2.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.2.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.191-1jpp.2.el6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.191-1jpp.2.el6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.191-1jpp.2.el6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.191-1jpp.2.el6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.191-1jpp.2.el6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.191-1jpp.2.el6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.191-1jpp.1.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.191-1jpp.1.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.191-1jpp.1.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.191-1jpp.1.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.191-1jpp.1.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.191-1jpp.1.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.15-1jpp.5.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.15-1jpp.5.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.15-1jpp.5.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.15-1jpp.5.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.15-1jpp.5.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.15-1jpp.5.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.15-1jpp.2.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.15-1jpp.2.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.15-1jpp.2.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.15-1jpp.2.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.15-1jpp.2.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.15-1jpp.2.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.25-1jpp.3.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.25-1jpp.3.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.25-1jpp.3.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.25-1jpp.3.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.25-1jpp.3.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.25-1jpp.3.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.25-1jpp.2.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.25-1jpp.2.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.25-1jpp.2.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.25-1jpp.2.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.25-1jpp.2.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.25-1jpp.2.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.25-1jpp.3.el6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.25-1jpp.3.el6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.25-1jpp.3.el6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.25-1jpp.3.el6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.15-1jpp.2.el6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.15-1jpp.2.el6"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-26.26.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-26.26.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-26.26.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.25-65.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.25-65.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.25-65.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-3.3.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u171-2.6.13-0ubuntu0.14.04.2"}]}],"versions":["7u25-2.3.12-4ubuntu3","7u25-2.3.12-4ubuntu5","7u45-2.4.3-3ubuntu1","7u45-2.4.3-3ubuntu2","7u45-2.4.3-4ubuntu1","7u45-2.4.3-4ubuntu2","7u51-2.4.4-1ubuntu1","7u51-2.4.5-1ubuntu1","7u51-2.4.6~pre1-1ubuntu2","7u51-2.4.6-1ubuntu3","7u51-2.4.6-1ubuntu4","7u55-2.4.7-1ubuntu1","7u65-2.5.1-4ubuntu1~0.14.04.1","7u65-2.5.1-4ubuntu1~0.14.04.2","7u65-2.5.2-3~14.04","7u71-2.5.3-0ubuntu0.14.04.1","7u75-2.5.4-1~trusty1","7u79-2.5.5-0ubuntu0.14.04.2","7u79-2.5.6-0ubuntu1.14.04.1","7u85-2.6.1-5ubuntu0.14.04.1","7u91-2.6.3-0ubuntu0.14.04.1","7u95-2.6.4-0ubuntu0.14.04.1","7u95-2.6.4-0ubuntu0.14.04.2","7u101-2.6.6-0ubuntu0.14.04.1","7u111-2.6.7-0ubuntu0.14.04.3","7u121-2.6.8-1ubuntu0.14.04.1","7u121-2.6.8-1ubuntu0.14.04.3","7u131-2.6.9-0ubuntu0.14.04.1","7u131-2.6.9-0ubuntu0.14.04.2","7u151-2.6.11-0ubuntu1.14.04.1","7u151-2.6.11-2ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u171-b11-0ubuntu0.16.04.1"}]}],"versions":["8u66-b01-5","8u72-b05-1ubuntu1","8u72-b05-5","8u72-b05-6","8u72-b15-1","8u72-b15-2ubuntu1","8u72-b15-2ubuntu3","8u72-b15-3ubuntu1","8u77-b03-1ubuntu2","8u77-b03-3ubuntu1","8u77-b03-3ubuntu2","8u77-b03-3ubuntu3","8u91-b14-0ubuntu4~16.04.1","8u91-b14-3ubuntu1~16.04.1","8u111-b14-2ubuntu0.16.04.2","8u121-b13-0ubuntu1.16.04.2","8u131-b11-0ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.3","8u151-b12-0ubuntu0.16.04.2","8u162-b12-0ubuntu0.16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u171-b11-0ubuntu0.18.04.1"}]}],"versions":["8u144-b01-2","8u151-b12-1","8u162-b12-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u171-b11-0ubuntu0.16.04.1"}]}],"versions":["8u66-b01-5","8u72-b05-1ubuntu1","8u72-b05-5","8u72-b05-6","8u72-b15-1","8u72-b15-2ubuntu1","8u72-b15-2ubuntu3","8u72-b15-3ubuntu1","8u77-b03-1ubuntu2","8u77-b03-3ubuntu1","8u77-b03-3ubuntu2","8u77-b03-3ubuntu3","8u91-b14-0ubuntu4~16.04.1","8u91-b14-3ubuntu1~16.04.1","8u111-b14-2ubuntu0.16.04.2","8u121-b13-0ubuntu1.16.04.2","8u131-b11-0ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.3","8u151-b12-0ubuntu0.16.04.2","8u162-b12-0ubuntu0.16.04.2"],"bundled":11}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"hp","product":"xp7_command_view"},{"vendor":"oracle","product":"jdk"},{"vendor":"oracle","product":"jre"},{"vendor":"oracle","product":"jrockit"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"redhat","product":"satellite"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:1975","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03857en_us","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1040697","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1724","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1203","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3644-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1723","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180419-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1722","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1974","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1205","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1721","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/103832","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03915en_us","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2783","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-36xm-wx7c-g2hq"},{"url":"https://access.redhat.com/errata/RHSA-2018:0099","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA","tags":["article"]},{"url":"http://www.oracle.com/technetwork/java/javase/8u161-relnotes-4021379.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534263","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534296","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534553","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534762","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534943","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535351","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535352","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535354","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0099.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2579","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2579","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2579","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2581","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2581","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2581","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2582","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2582","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2582","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2588","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2588","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2588","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2599","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2599","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2602","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2602","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2602","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2603","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2603","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2603","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2618","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2618","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2618","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2627","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2627","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2627","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2629","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2629","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2629","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2633","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2633","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2633","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2634","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2634","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2634","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2637","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2637","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2637","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2638","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2638","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2638","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2639","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2641","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2641","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2641","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2663","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2663","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2663","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2677","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2677","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2677","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2678","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2678","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2678","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2783","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1569204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2783","tags":["advisory","report"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0100","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"http://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_171","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535353","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0100.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2657","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2657","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2657","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1567121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1567126","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1567351","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1567537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1567543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1567545","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568515","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1203.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2790","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2790","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2790","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2794","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2794","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2794","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2795","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2795","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2795","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2797","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2797","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2797","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2798","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2798","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2798","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2800","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2800","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2800","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2814","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2814","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2814","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2815","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2815","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2815","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1205.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1567542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1567546","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1721.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2796","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2796","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2796","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2799","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2799","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2799","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1722.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1723.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1724.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1974.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1975.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181447-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1085449","tags":["report"]},{"url":"https://bugzilla.suse.com/1093311","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2814","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181458-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181738-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2826","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181738-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181764-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181764-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182068-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-2783","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3644-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-2790","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2794","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2795","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2796","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2797","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2798","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2799","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2800","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2814","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2815","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-2783","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).","status":"published","published":"2018-04-19T02:00:00Z","modified":"2024-10-03T20:19:22.002Z","updated_at":"2026-11-02T14:35:04.911021Z"}],"euvd":[{"id":"EUVD-2018-14638","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).","status":"published","published":"2018-04-19T02:00:00Z","modified":"2024-10-03T20:19:22Z","updated_at":"2026-11-03T00:27:53.369246Z"}],"ghsa":[{"id":"GHSA-36xm-wx7c-g2hq","title":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).","status":"published","published":"2022-05-13T01:16:55Z","modified":"2023-01-27T05:05:09Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T14:42:37.899935Z"}],"nvd":[{"id":"CVE-2018-2783","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).","status":"published","published":"2018-04-19T02:29:03.02Z","modified":"2026-06-17T01:56:18.8Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:04:25.506659Z"}],"osv":[{"id":"RHSA-2018:0099","title":"Red Hat Security Advisory: java-1.8.0-oracle security update","status":"published","published":"2024-09-16T00:56:41Z","modified":"2026-06-29T10:19:00Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0100","title":"Red Hat Security Advisory: java-1.7.0-oracle security update","status":"published","published":"2024-09-16T00:56:47Z","modified":"2026-06-28T10:23:04Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1203","title":"Red Hat Security Advisory: java-1.6.0-sun security update","status":"published","published":"2024-09-13T15:07:58Z","modified":"2026-06-29T10:19:49Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1205","title":"Red Hat Security Advisory: java-1.6.0-sun security update","status":"published","published":"2024-09-13T15:08:19Z","modified":"2026-06-29T10:19:50Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1721","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T15:08:01Z","modified":"2026-06-29T10:20:49Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1722","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T15:08:09Z","modified":"2026-06-29T10:20:50Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1723","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-13T15:08:15Z","modified":"2026-06-29T10:20:50Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1724","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-13T15:08:21Z","modified":"2026-06-29T10:20:51Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1974","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-13T15:08:22Z","modified":"2026-06-29T10:21:06Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1975","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T15:08:17Z","modified":"2026-06-29T10:21:06Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2018-2783","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).","status":"published","published":"2018-04-18T00:00:00Z","modified":"2026-02-04T04:12:26.691363Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"},{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:17.91743Z"},{"id":"SUSE-SU-2018:1447-1","title":"Security update for java-1_7_1-ibm","description":"\n\nIBM Java was updated to 7.1.4.25 [bsc#1093311, bsc#1085449]\n\nSecurity fixes:\n\n-   CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799\n    CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795\n    CVE-2018-2800 CVE-2018-2790 CVE-2018-1417\n","status":"published","published":"2018-05-28T08:58:16Z","modified":"2026-02-04T02:57:25.592901Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1458-1","title":"Security update for java-1_7_0-ibm","description":"This update for java-1_7_0-ibm fixes the following issues:\n\nIBM Java was updated to 7.1.4.25 (bsc#1093311, bsc#1085449)\n\nSecurity fixes:\n\n- CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799\n  CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795\n  CVE-2018-2800 CVE-2018-2790 CVE-2018-1417\n","status":"published","published":"2018-05-29T08:30:56Z","modified":"2025-05-02T04:07:45.440129Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1738-1","title":"Security update for java-1_8_0-ibm","description":"\n\nIBM Java was updated to version 8.0.5.15 [bsc#1093311, bsc#1085449]\n\nSecurity fixes:\n\n- CVE-2018-2826 CVE-2018-2825 CVE-2018-2814 CVE-2018-2794\n  CVE-2018-2783 CVE-2018-2799 CVE-2018-2798 CVE-2018-2797\n  CVE-2018-2796 CVE-2018-2795 CVE-2018-2800 CVE-2018-2790\n  CVE-2018-1417\n\n- Removed translations in the java-1_8_0-ibm-devel-32bit package\n  as they conflict with those in java-1_8_0-ibm-devel.\n","status":"published","published":"2018-06-19T13:49:40Z","modified":"2026-02-04T02:45:48.433416Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1738-2","title":"Security update for java-1_8_0-ibm","description":"\n\nIBM Java was updated to version 8.0.5.15 [bsc#1093311, bsc#1085449]\n\nSecurity fixes:\n\n- CVE-2018-2826 CVE-2018-2825 CVE-2018-2814 CVE-2018-2794\n  CVE-2018-2783 CVE-2018-2799 CVE-2018-2798 CVE-2018-2797\n  CVE-2018-2796 CVE-2018-2795 CVE-2018-2800 CVE-2018-2790\n  CVE-2018-1417\n\n- Removed translations in the java-1_8_0-ibm-devel-32bit package\n  as they conflict with those in java-1_8_0-ibm-devel.\n","status":"published","published":"2018-10-18T12:45:52Z","modified":"2026-02-04T02:40:10.331412Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1764-1","title":"Security update for java-1_7_1-ibm","description":"\n\nIBM Java was updated to 7.1.4.25 [bsc#1093311, bsc#1085449]:\n\nSecurity fixes:\n\n- CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799\n  CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795\n  CVE-2018-2800 CVE-2018-2790 CVE-2018-1417\n","status":"published","published":"2018-06-20T12:42:35Z","modified":"2026-02-04T02:31:44.523937Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1764-2","title":"Security update for java-1_7_1-ibm","description":"\n\nIBM Java was updated to 7.1.4.25 [bsc#1093311, bsc#1085449]:\n\nSecurity fixes:\n\n- CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799\n  CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795\n  CVE-2018-2800 CVE-2018-2790 CVE-2018-1417\n","status":"published","published":"2018-10-18T12:45:40Z","modified":"2026-02-04T04:28:20.608531Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2068-1","title":"Security update for java-1_8_0-ibm","description":"\nIBM Java was updated to version 8.0.5.15 [bsc#1093311, bsc#1085449]\n\nSecurity fixes:\n\n- CVE-2018-2826 CVE-2018-2825 CVE-2018-2814 CVE-2018-2794\n  CVE-2018-2783 CVE-2018-2799 CVE-2018-2798 CVE-2018-2797\n  CVE-2018-2796 CVE-2018-2795 CVE-2018-2800 CVE-2018-2790\n  CVE-2018-1417\n\n- Removed translations in the java-1_8_0-ibm-devel-32bit package\n  as they conflict with those in java-1_8_0-ibm-devel.\n","status":"published","published":"2018-07-26T14:28:02Z","modified":"2026-02-04T02:21:08.223897Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"USN-3644-1","title":"openjdk-8 vulnerabilities","description":"It was discovered that the Security component of OpenJDK did not\ncorrectly perform merging of multiple sections for the same file listed\nin JAR archive file manifests. An attacker could possibly use this to\nmodify attributes in a manifest without invalidating the signature.\n(CVE-2018-2790)\n\nFrancesco Palmarini, Marco Squarcina, Mauro Tempesta, and Riccardo Focardi\ndiscovered that the Security component of OpenJDK did not restrict which\nclasses could be used when deserializing keys from the JCEKS key stores. An\nattacker could use this to specially craft a JCEKS key store to execute\narbitrary code. (CVE-2018-2794)\n\nIt was discovered that the Security component of OpenJDK in some situations\ndid not properly limit the amount of memory allocated when performing\ndeserialization. An attacker could use this to cause a denial of service\n(memory exhaustion). (CVE-2018-2795)\n\nIt was discovered that the Concurrency component of OpenJDK in some\nsituations did not properly limit the amount of memory allocated when\nperforming deserialization. An attacker could use this to cause a\ndenial of service (memory exhaustion). (CVE-2018-2796)\n\nIt was discovered that the JMX component of OpenJDK in some situations did\nnot properly limit the amount of memory allocated when performing\ndeserialization. An attacker could use this to cause a denial of service\n(memory exhaustion). (CVE-2018-2797)\n\nIt was discovered that the AWT component of OpenJDK in some situations did\nnot properly limit the amount of memory allocated when performing\ndeserialization. An attacker could use this to cause a denial of service\n(memory exhaustion). (CVE-2018-2798)\n\nIt was discovered that the JAXP component of OpenJDK in some situations did\nnot properly limit the amount of memory allocated when performing\ndeserialization. An attacker could use this to cause a denial of service\n(memory exhaustion). (CVE-2018-2799)\n\nMoritz Bechler discovered that the RMI component of OpenJDK enabled HTTP\ntransport for RMI servers by default. A remote attacker could use this to\ngain access to restricted services. (CVE-2018-2800)\n\nIt was discovered that a vulnerability existed in the Hotspot component of\nOpenJDK affecting confidentiality, data integrity, and availability. An\nattacker could use this to specially craft an Java application that caused\na denial of service or bypassed sandbox restrictions. (CVE-2018-2814)\n\nApostolos Giannakidis discovered that the Serialization component\nof OpenJDK did not properly bound memory allocations in some\nsituations. An attacker could use this to cause a denial of service\n(memory exhaustion). (CVE-2018-2815)\n\nDavid Benjamin discovered a vulnerability in the Security component\nof OpenJDK related to data integrity and confidentiality. A remote\nattacker could possibly use this to expose sensitive information.\n(CVE-2018-2783)\n","status":"published","published":"2018-05-11T01:44:34Z","modified":"2026-02-10T04:41:20Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}