OpenJDK: incorrect String object deserialization in IIOPInputStream (CORBA, 8076387)
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Oracle Java for Red Hat Enterprise Linux 5 | |||
| java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11 | cpe:/a:redhat:rhel_extras_oracle_java:5 | RHSA-2015:1927 | 2015-10-22T00:00:00Z |
| java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11 | cpe:/a:redhat:rhel_extras_oracle_java:5 | RHSA-2015:1928 | 2015-10-22T00:00:00Z |
| Oracle Java for Red Hat Enterprise Linux 6 | |||
| java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7 | cpe:/a:redhat:rhel_extras_oracle_java:6 | RHSA-2015:1926 | 2015-10-22T00:00:00Z |
| java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7 | cpe:/a:redhat:rhel_extras_oracle_java:6 | RHSA-2015:1927 | 2015-10-22T00:00:00Z |
| java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7 | cpe:/a:redhat:rhel_extras_oracle_java:6 | RHSA-2015:1928 | 2015-10-22T00:00:00Z |
| Oracle Java for Red Hat Enterprise Linux 7 | |||
| java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1 | cpe:/a:redhat:rhel_extras_oracle_java:7 | RHSA-2015:1926 | 2015-10-22T00:00:00Z |
| java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1 | cpe:/a:redhat:rhel_extras_oracle_java:7 | RHSA-2015:1927 | 2015-10-22T00:00:00Z |
| java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1 | cpe:/a:redhat:rhel_extras_oracle_java:7 | RHSA-2015:1928 | 2015-10-22T00:00:00Z |
| Red Hat Enterprise Linux 5 | |||
| java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2015:1921 | 2015-10-21T00:00:00Z |
| java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2015:2086 | 2015-11-18T00:00:00Z |
| Red Hat Enterprise Linux 5 Supplementary | |||
| java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2015:2507 | 2015-11-23T00:00:00Z |
| java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2015:2508 | 2015-11-23T00:00:00Z |
| Red Hat Enterprise Linux 6 | |||
| java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2015:1919 | 2015-10-21T00:00:00Z |
| java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2015:1920 | 2015-10-21T00:00:00Z |
| java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2015:2086 | 2015-11-18T00:00:00Z |
| Red Hat Enterprise Linux 6 Supplementary | |||
| java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7 | cpe:/a:redhat:rhel_extras:6 | RHSA-2015:2506 | 2015-11-23T00:00:00Z |
| java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7 | cpe:/a:redhat:rhel_extras:6 | RHSA-2015:2508 | 2015-11-23T00:00:00Z |
| Red Hat Enterprise Linux 7 | |||
| java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2015:1919 | 2015-10-21T00:00:00Z |
| java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2015:1920 | 2015-10-21T00:00:00Z |
| java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2015:2086 | 2015-11-18T00:00:00Z |
| Red Hat Enterprise Linux 7 Supplementary | |||
| java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7 | cpe:/a:redhat:rhel_extras:7 | RHSA-2015:2506 | 2015-11-23T00:00:00Z |
| java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7 | cpe:/a:redhat:rhel_extras:7 | RHSA-2015:2509 | 2015-11-23T00:00:00Z |
| Red Hat Satellite 5.6 | |||
| java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5 | cpe:/a:redhat:network_satellite:5.6::el5 | RHSA-2016:1430 | 2016-07-18T00:00:00Z |
| java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7 | cpe:/a:redhat:network_satellite:5.6::el5 | RHSA-2016:1430 | 2016-07-18T00:00:00Z |
| spacewalk-java-0:2.0.2-109.el6sat | cpe:/a:redhat:network_satellite:5.6::el5 | RHSA-2016:1430 | 2016-07-18T00:00:00Z |
| Red Hat Satellite 5.7 | |||
| java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7 | cpe:/a:redhat:network_satellite:5.7::el6 | RHSA-2016:1430 | 2016-07-18T00:00:00Z |
| spacewalk-java-0:2.3.8-146.el6sat | cpe:/a:redhat:network_satellite:5.7::el6 | RHSA-2016:1430 | 2016-07-18T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-346-1 | openjdk-6 security update |
Debian DSA |
DSA-3381-1 | openjdk-7 security update |
Debian DSA |
DSA-3381-2 | openjdk-7 security update |
EUVD |
EUVD-2015-4899 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect availability via vectors related to CORBA. |
Ubuntu USN |
USN-2784-1 | OpenJDK 7 vulnerabilities |
Ubuntu USN |
USN-2827-1 | OpenJDK 6 vulnerabilities |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 3.9% (3.875% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|