Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions. NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Java | — | Upgrade to Apple Java version 1.6.0.31 | Apr 4, 2012 | Apr 4, 2012 |
| Centos_linux | — | Upgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-javadoc | Dec 1, 2016 | Jun 7, 2012 |
| Gentoo Linux | — | Upgrade app-emulation/emul-linux-x86-java.Upgrade dev-java/sun-jdk.Upgrade dev-java/oracle-jdk-bin.Upgrade dev-java/oracle-jre-bin.Upgrade dev-java/sun-jre-bin. | Oct 30, 2017 | Jun 7, 2012 |
| Hpux | — | Update Jre70.JRE70-IPF32 to the latest versionUpdate Jre70.JRE70-IPF64 to the latest versionUpdate Jdk70.JDK70-IPF64 to the latest versionUpdate Jre70.JRE70-COM to the latest versionUpdate Jdk70.JDK70-DEMO to the latest versionUpdate Jre70.JRE70-IPF64-HS to the latest versionUpdate Jdk70.JDK70-COM to the latest versionUpdate Jdk70.JDK70-IPF32 to the latest versionUpdate Jre70.JRE70-IPF32-HS to the latest version | Aug 11, 2017 | Jun 7, 2012 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Feb 20, 2012 | Feb 20, 2012 |
| Oracle_linux | — | Upgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk-demo | Oct 16, 2024 | Jun 7, 2012 |
| Redhat_linux | — | No solution exists | Jul 16, 2026 | Feb 14, 2012 |
| Suse | — | Upgrade java-1_6_0-ibmUpgrade java-1_5_0-ibm-jdbcUpgrade java-1_6_0-ibm-plugin-32bitUpgrade java-1_5_0-ibm-pluginUpgrade java-1_6_0-ibm-32bitUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_6_0-ibm-develUpgrade java-1_6_0-ibm-alsa-32bitUpgrade java-1_5_0-ibm-srcUpgrade java-1_6_0-ibm-fontsUpgrade java-1_6_0-ibm-64bitUpgrade java-1_5_0-ibm-32bitUpgrade java-1_5_0-ibm-64bitUpgrade java-1_5_0-ibm-fontsUpgrade java-1_5_0-ibm-alsa-32bitUpgrade java-1_6_0-ibm-pluginUpgrade java-1_5_0-ibm-demoUpgrade java-1_6_0-ibm-devel-32bitUpgrade java-1_6_0-ibm-alsaUpgrade java-1_5_0-ibmUpgrade java-1_5_0-ibm-devel-32bitUpgrade java-1_5_0-ibm-develUpgrade java-1_5_0-ibm-alsa | Feb 17, 2015 | Jun 7, 2012 |
| Ubuntu | — | Upgrade icedtea-6-jre-cacaoUpgrade icedtea-6-jre-jamvmUpgrade openjdk-6-jre-libUpgrade openjdk-6-jre-zeroUpgrade openjdk-6-jreUpgrade openjdk-6-jre-headless | Nov 8, 2024 | Jun 7, 2012 |
| Vmsa 2012 0013 | — | Apply ESX400-201209401-SG | Sep 17, 2012 | Jun 7, 2012 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 7, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub