Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: Applies to the Java SE Kerberos client. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openjdk8 | Nov 8, 2019 | Oct 19, 2017 |
| Amazon_linux | — | Upgrade java-1.7.0-openjdkUpgrade java-1.8.0-openjdk | Oct 27, 2017 | Oct 19, 2017 |
| Azul Zulu | — | Upgrade to Azul Zulu JDK 8 installer 8.25 (JDK 8u152, quarterly CPU) (LTS stream)Apply legacy security update: Azul Zulu JDK 6 installer 6.18 (JDK 6u99, quarterly CPU) — Azul Legacy Production SupportApply legacy security update: Azul Zulu JDK 7 installer 7.21 (JDK 7u161, quarterly CPU) — Azul Legacy Production SupportApply Azul Zulu JDK 9 installer 9.0.1 (JDK 9.0.1, PSU) (short-term support); migrate to JDK 11 (LTS) | Oct 19, 2017 | Oct 19, 2017 |
| Centos_linux | — | Upgrade java-1.8.0-ibm-demoUpgrade java-1.7.0-openjdkUpgrade java-1.7.0-openjdk-debuginfoUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-openjdk-accessibility-debugUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-openjdk-javadoc-zip-debugUpgrade satelliteUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-src-debugUpgrade java-1.8.0-openjdk-develUpgrade java-1.7.0-openjdk-srcUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-ibmUpgrade java-1.8.0-openjdk-debugUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.8.0-ibm-pluginUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.7.1-ibmUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-openjdk-devel-debugUpgrade java-1.7.1-ibm-demoUpgrade java-1.8.0-openjdk-headless-debugUpgrade satellite-brandingUpgrade java-1.7.0-openjdk-demoUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-openjdk-javadoc-debugUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-debuginfoUpgrade java-1.7.0-openjdk-develUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-demo-debug | Oct 23, 2017 | Oct 19, 2017 |
| Debian | — | Upgrade openjdk-8Upgrade openjdk-7 | Nov 24, 2017 | Oct 19, 2017 |
| Gentoo Linux | — | Upgrade dev-java/oracle-jdk-bin.Upgrade dev-java/icedtea-bin.Upgrade dev-java/oracle-jre-bin. | Oct 30, 2017 | Oct 19, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade java-1.7.0-openjdkUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.7.0-openjdk-devel | Nov 30, 2017 | Oct 19, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade java-1.7.0-openjdkUpgrade java-1.7.0-openjdk-develUpgrade java-1.7.0-openjdk-headless | Nov 30, 2017 | Oct 19, 2017 |
| Ibm Aix | — | Apply the fix or workaround for java_oct2017_advisory | Dec 8, 2017 | Dec 7, 2017 |
| Ibm Java | — | Upgrade IBM Java to version 8.0.5.5Upgrade IBM Java to version 6.0.16.55Upgrade IBM Java to version 7.0.10.15Upgrade IBM Java to version 6.1.8.55Upgrade IBM Java to version 7.1.4.15 | Oct 5, 2018 | Oct 19, 2017 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Apr 27, 2018 | Oct 19, 2017 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 18, 2017 | Oct 18, 2017 |
| Oracle_linux | — | Upgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-javadoc-debugUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-demo-debugUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.7.0-openjdk-demoUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-develUpgrade java-1.7.0-openjdk-develUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.8.0-openjdk-devel-debugUpgrade java-1.8.0-openjdk-headless-debugUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-javadoc-zip-debugUpgrade java-1.8.0-openjdk-debugUpgrade java-1.7.0-openjdk-srcUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.7.0-openjdkUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-accessibility-debugUpgrade java-1.8.0-openjdk-src-debugUpgrade java-1.8.0-openjdk-demo | Oct 20, 2017 | Oct 17, 2017 |
| Redhat_linux | — | Upgrade java-1.8.0-ibmUpgrade java-1.8.0-openjdk-srcUpgrade java-1.7.1-ibm-pluginUpgrade java-1.7.1-ibm-demoUpgrade java-1.8.0-openjdk-accessibility-debugUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-openjdk-javadoc-zip-debugUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-openjdk-debuginfoUpgrade java-1.8.0-ibm-demoUpgrade java-1.7.1-ibmUpgrade java-1.7.0-openjdkNo solution existsUpgrade java-1.7.1-ibm-develUpgrade satelliteUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-openjdk-demoUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.7.1-ibm-srcUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-openjdk-devel-debugUpgrade java-1.7.0-openjdk-debuginfoUpgrade java-1.8.0-openjdk-src-debugUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade satellite-brandingUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-srcUpgrade java-1.8.0-openjdk-javadoc-debugUpgrade java-1.7.0-openjdk-develUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-demo-debugUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.8.0-openjdk-debugUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.7.0-openjdk-demoUpgrade java-1.8.0-openjdk-headless-debug | Oct 25, 2017 | Oct 19, 2017 |
| Suse | — | Upgrade java-1_8_0-openjdkUpgrade java-1_7_0-ibm-jdbcUpgrade java-1_7_0-ibm-pluginUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_8_0-openjdk-demoUpgrade java-1_8_0-ibm-pluginUpgrade java-1_8_0-ibmUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_7_0-ibm-alsaUpgrade java-1_7_0-ibm-develUpgrade java-1_6_0-ibm-pluginUpgrade java-1_8_0-openjdk-develUpgrade java-1_6_0-ibm-develUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_0-ibmUpgrade java-1_7_1-ibmUpgrade java-1_6_0-ibm-fontsUpgrade java-1_7_1-ibm-alsaUpgrade java-1_7_1-ibm-develUpgrade java-1_8_0-ibm-alsaUpgrade java-1_8_0-ibm-develUpgrade java-1_6_0-ibmUpgrade java-1_7_0-openjdkUpgrade java-1_7_0-openjdk-demoUpgrade java-1_7_0-openjdk-headlessUpgrade java-1_7_0-openjdk-develUpgrade java-1_8_0-openjdk-headlessUpgrade java-1_6_0-ibm-alsa | Nov 10, 2017 | Oct 19, 2017 |
| Ubuntu | — | Upgrade openjdk-7-jre-headlessUpgrade openjdk-7-jre-libUpgrade icedtea-7-jre-jamvmUpgrade openjdk-8-jdk-headlessUpgrade openjdk-7-jreUpgrade openjdk-8-jdkUpgrade openjdk-8-jre-headlessUpgrade openjdk-7-jre-zeroUpgrade openjdk-8-jre-jamvmUpgrade openjdk-8-jreUpgrade openjdk-8-jre-zero | Nov 8, 2017 | Oct 19, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 19, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub