The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions. NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Java | — | Upgrade to Apple Java version 1.6.0.31 | Apr 4, 2012 | Apr 4, 2012 |
| Centos_linux | — | Upgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-javadoc | Dec 1, 2016 | Jun 7, 2012 |
| Gentoo Linux | — | Upgrade app-emulation/emul-linux-x86-java.Upgrade dev-java/sun-jdk.Upgrade dev-java/oracle-jre-bin.Upgrade dev-java/oracle-jdk-bin.Upgrade dev-java/sun-jre-bin. | Oct 30, 2017 | Jun 7, 2012 |
| Hpux | — | Update Jre70.JRE70-IPF64-HS to the latest versionUpdate Jdk70.JDK70-COM to the latest versionUpdate Jdk70.JDK70-DEMO to the latest versionUpdate Jdk70.JDK70-IPF32 to the latest versionUpdate Jre70.JRE70-IPF32-HS to the latest versionUpdate Jre70.JRE70-COM to the latest versionUpdate Jdk70.JDK70-IPF64 to the latest versionUpdate Jre70.JRE70-IPF64 to the latest versionUpdate Jre70.JRE70-IPF32 to the latest version | Aug 11, 2017 | Jun 7, 2012 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Feb 20, 2012 | Feb 20, 2012 |
| Oracle_linux | — | Upgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-javadoc | Oct 16, 2024 | Jun 7, 2012 |
| Redhat_linux | — | No solution exists | Jul 16, 2026 | Feb 14, 2012 |
| Suse | — | Upgrade java-1_5_0-ibm-fontsUpgrade java-1_6_0-ibm-64bitUpgrade java-1_6_0-ibm-plugin-32bitUpgrade java-1_6_0-ibm-alsa-32bitUpgrade java-1_5_0-ibm-64bitUpgrade java-1_6_0-ibm-fontsUpgrade java-1_5_0-ibm-pluginUpgrade java-1_5_0-ibm-jdbcUpgrade java-1_6_0-ibmUpgrade java-1_6_0-ibm-develUpgrade java-1_5_0-ibm-srcUpgrade java-1_5_0-ibm-32bitUpgrade java-1_6_0-ibm-32bitUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_6_0-ibm-alsaUpgrade java-1_5_0-ibmUpgrade java-1_5_0-ibm-demoUpgrade java-1_6_0-ibm-pluginUpgrade java-1_5_0-ibm-devel-32bitUpgrade java-1_6_0-ibm-devel-32bitUpgrade java-1_5_0-ibm-alsaUpgrade java-1_5_0-ibm-develUpgrade java-1_5_0-ibm-alsa-32bit | Feb 17, 2015 | Jun 7, 2012 |
| Ubuntu | — | Upgrade icedtea-6-jre-cacaoUpgrade icedtea-6-jre-jamvmUpgrade openjdk-6-jre-libUpgrade openjdk-6-jreUpgrade openjdk-6-jre-zeroUpgrade openjdk-6-jre-headless | Nov 8, 2024 | Jun 7, 2012 |
| Vmsa 2012 0013 | — | Apply ESX400-201209401-SG | Sep 17, 2012 | Jun 7, 2012 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 7, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub