Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openjdk8Upgrade openjdk7 | Aug 22, 2024 | Jan 16, 2019 |
| Azul Zulu | — | Upgrade to Azul Zulu JDK 8 installer 8.34 (JDK 8u201, quarterly CPU) (LTS stream)Apply legacy security update: Azul Zulu JDK 7 installer 7.27 (JDK 7u211, quarterly CPU) — Azul Legacy Production SupportUpgrade to Azul Zulu JDK 11 installer 11.29 (JDK 11.0.2, PSU) (LTS stream)Apply legacy security update: Azul Zulu JDK 6 installer 6.23 (JDK 6u123, quarterly CPU) — Azul Legacy Production Support | Jan 16, 2019 | Jan 16, 2019 |
| Debian | — | Upgrade openjdk-8Upgrade openjdk-7 | Feb 14, 2019 | Feb 14, 2019 |
| Gentoo Linux | — | Upgrade dev-java/oracle-jdk-bin.Upgrade dev-java/oracle-jre-bin. | Mar 14, 2019 | Jan 16, 2019 |
| Ibm Aix | — | Apply the fix or workaround for java_jan2019_advisory | Apr 23, 2019 | Jan 16, 2019 |
| Ibm Java | — | Upgrade IBM Java to version 7.1.4.40Upgrade IBM Java to version 8.0.5.30Upgrade IBM Java to version 7.0.10.40 | Mar 12, 2019 | Jan 16, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 16, 2019 | Jan 16, 2019 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Jan 17, 2019 | Jan 16, 2019 |
| Suse | — | Upgrade java-1_8_0-ibmUpgrade java-11-openjdk-headlessUpgrade java-11-openjdk-develUpgrade java-11-openjdkUpgrade java-11-openjdk-accessibilityUpgrade java-1_8_0-openjdkUpgrade java-1_7_0-openjdkUpgrade java-11-openjdk-jmodsUpgrade java-11-openjdk-javadocUpgrade java-1_7_1-ibm-pluginUpgrade java-1_8_0-openjdk-headlessUpgrade java-11-openjdk-demoUpgrade java-1_8_0-ibm-develUpgrade java-1_8_0-ibm-pluginUpgrade java-11-openjdk-srcUpgrade java-1_7_0-openjdk-develUpgrade java-1_7_0-openjdk-demoUpgrade java-1_8_0-ibm-alsaUpgrade java-1_8_0-openjdk-demoUpgrade java-1_7_1-ibm-develUpgrade java-1_7_0-openjdk-headlessUpgrade java-1_7_1-ibm-alsaUpgrade java-1_7_1-ibmUpgrade java-1_8_0-openjdk-develUpgrade java-1_7_1-ibm-jdbc | Feb 13, 2019 | Jan 16, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 16, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub