Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions. NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Java | — | Upgrade to Apple Java version 1.6.0.31 | Apr 4, 2012 | Apr 4, 2012 |
| Centos_linux | — | Upgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-javadoc | Dec 1, 2016 | Jun 7, 2012 |
| Gentoo Linux | — | Upgrade app-emulation/emul-linux-x86-java.Upgrade dev-java/sun-jdk.Upgrade dev-java/oracle-jdk-bin.Upgrade dev-java/sun-jre-bin.Upgrade dev-java/oracle-jre-bin. | Oct 30, 2017 | Jun 7, 2012 |
| Hpux | — | Update Jdk70.JDK70-DEMO to the latest versionUpdate Jre70.JRE70-IPF64-HS to the latest versionUpdate Jre70.JRE70-IPF32-HS to the latest versionUpdate Jdk70.JDK70-IPF32 to the latest versionUpdate Jdk70.JDK70-COM to the latest versionUpdate Jre70.JRE70-IPF64 to the latest versionUpdate Jre70.JRE70-IPF32 to the latest versionUpdate Jre70.JRE70-COM to the latest versionUpdate Jdk70.JDK70-IPF64 to the latest version | Aug 11, 2017 | Jun 7, 2012 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Feb 20, 2012 | Feb 20, 2012 |
| Oracle_linux | — | Upgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-src | Oct 16, 2024 | Jun 7, 2012 |
| Redhat_linux | — | No solution exists | Jul 16, 2026 | Feb 14, 2012 |
| Suse | — | Upgrade java-1_6_0-ibm-pluginUpgrade java-1_5_0-ibm-alsa-32bitUpgrade java-1_5_0-ibm-devel-32bitUpgrade java-1_5_0-ibm-alsaUpgrade java-1_6_0-ibm-devel-32bitUpgrade java-1_5_0-ibm-develUpgrade java-1_5_0-ibm-demoUpgrade java-1_5_0-ibmUpgrade java-1_6_0-ibm-alsaUpgrade java-1_6_0-ibm-alsa-32bitUpgrade java-1_6_0-ibm-plugin-32bitUpgrade java-1_6_0-ibm-32bitUpgrade java-1_6_0-ibm-64bitUpgrade java-1_5_0-ibm-32bitUpgrade java-1_5_0-ibm-pluginUpgrade java-1_5_0-ibm-jdbcUpgrade java-1_6_0-ibm-fontsUpgrade java-1_5_0-ibm-fontsUpgrade java-1_5_0-ibm-64bitUpgrade java-1_5_0-ibm-srcUpgrade java-1_6_0-ibm-develUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_6_0-ibm | Feb 17, 2015 | Jun 7, 2012 |
| Ubuntu | — | Upgrade openjdk-6-jre-headlessUpgrade openjdk-6-jreUpgrade openjdk-6-jre-libUpgrade icedtea-6-jre-jamvmUpgrade icedtea-6-jre-cacaoUpgrade openjdk-6-jre-zero | Nov 8, 2024 | Jun 7, 2012 |
| Vmsa 2012 0013 | — | Apply ESX400-201209401-SG | Sep 17, 2012 | Jun 7, 2012 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 7, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub