Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions. NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Java | — | Upgrade to Apple Java version 1.6.0.31 | Apr 4, 2012 | Apr 4, 2012 |
| Centos_linux | — | Upgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-javadoc | Dec 1, 2016 | Jun 7, 2012 |
| Gentoo Linux | — | Upgrade dev-java/sun-jdk.Upgrade app-emulation/emul-linux-x86-java.Upgrade dev-java/oracle-jdk-bin.Upgrade dev-java/sun-jre-bin.Upgrade dev-java/oracle-jre-bin. | Oct 30, 2017 | Jun 7, 2012 |
| Hpux | — | Update Jdk70.JDK70-IPF32 to the latest versionUpdate Jre70.JRE70-IPF32-HS to the latest versionUpdate Jdk70.JDK70-COM to the latest versionUpdate Jdk70.JDK70-DEMO to the latest versionUpdate Jre70.JRE70-IPF64-HS to the latest versionUpdate Jdk70.JDK70-IPF64 to the latest versionUpdate Jre70.JRE70-IPF64 to the latest versionUpdate Jre70.JRE70-IPF32 to the latest versionUpdate Jre70.JRE70-COM to the latest version | Aug 11, 2017 | Jun 7, 2012 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Feb 20, 2012 | Feb 20, 2012 |
| Oracle_linux | — | Upgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk-demo | Oct 16, 2024 | Jun 7, 2012 |
| Redhat_linux | — | No solution exists | Jul 16, 2026 | Feb 14, 2012 |
| Suse | — | Upgrade java-1_6_0-ibm-64bitUpgrade java-1_6_0-ibm-fontsUpgrade java-1_6_0-ibmUpgrade java-1_5_0-ibm-64bitUpgrade java-1_6_0-ibm-alsa-32bitUpgrade java-1_6_0-ibm-develUpgrade java-1_6_0-ibm-plugin-32bitUpgrade java-1_5_0-ibm-fontsUpgrade java-1_6_0-ibm-32bitUpgrade java-1_5_0-ibm-32bitUpgrade java-1_5_0-ibm-pluginUpgrade java-1_5_0-ibm-srcUpgrade java-1_5_0-ibm-jdbcUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_5_0-ibm-alsa-32bitUpgrade java-1_5_0-ibm-develUpgrade java-1_5_0-ibm-devel-32bitUpgrade java-1_5_0-ibmUpgrade java-1_5_0-ibm-alsaUpgrade java-1_6_0-ibm-alsaUpgrade java-1_5_0-ibm-demoUpgrade java-1_6_0-ibm-devel-32bitUpgrade java-1_6_0-ibm-plugin | Feb 17, 2015 | Jun 7, 2012 |
| Ubuntu | — | Upgrade openjdk-6-jre-headlessUpgrade openjdk-6-jre-zeroUpgrade icedtea-6-jre-jamvmUpgrade openjdk-6-jreUpgrade icedtea-6-jre-cacaoUpgrade openjdk-6-jre-lib | Nov 8, 2024 | Jun 7, 2012 |
| Vmsa 2012 0013 | — | Apply ESX400-201209401-SG | Sep 17, 2012 | Jun 7, 2012 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 7, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub