2 lines
9.6 KiB
JSON
2 lines
9.6 KiB
JSON
{"affected":[{"affectedData":[{"product":"Java","vendor":"Oracle Corporation","versions":[{"status":"affected","version":"Java SE: 6u171"},{"status":"affected","version":"7u161; JRockit: R28.3.16"}]}],"source":"secalert_us@oracle.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update171:*:*:*:*:*:*","matchCriteriaId":"CB929C7D-A5EE-4603-9414-E535408B41A1","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:jdk:1.7.0:update161:*:*:*:*:*:*","matchCriteriaId":"4AA4AF8B-2E5E-4A5E-8930-B53A01A22C78","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:jre:1.6.0:update171:*:*:*:*:*:*","matchCriteriaId":"A86C2A04-A51C-403A-AAB5-81872453022D","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:jre:1.7.0:update161:*:*:*:*:*:*","matchCriteriaId":"32F5FDBE-ED30-48A9-B130-A48309C7D2CD","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:jrockit:r28.3.16:*:*:*:*:*:*:*","matchCriteriaId":"7283D6DD-DBFA-456F-9381-692B605B5625","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*","matchCriteriaId":"D4840254-CC76-4113-BC61-360BD15582B9","vulnerable":true},{"criteria":"cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*","matchCriteriaId":"85EA16E0-9261-45C4-840F-5366E9EAC5E1","vulnerable":true},{"criteria":"cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*","matchCriteriaId":"F4F86C3C-B99C-44C6-97D7-163DC3F59687","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:schneider-electric:struxureware_data_center_expert:*:*:*:*:*:*:*:*","matchCriteriaId":"6CB56955-1A47-4F6C-A354-8BBAE7534504","versionEndExcluding":"7.6.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:hp:xp_command_view:*:*:*:*:advanced:*:*:*","matchCriteriaId":"F5B13AEB-7C8C-49EB-BD13-CBA12CA529BA","versionStartIncluding":"8.6.2-01","vulnerable":true},{"criteria":"cpe:2.3:a:hp:xp_p9000_command_view:*:*:*:*:advanced:*:*:*","matchCriteriaId":"DA653F23-232D-4086-B9A4-4D809C87D9F1","versionStartIncluding":"8.6.2-01","vulnerable":true},{"criteria":"cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*","matchCriteriaId":"E92000F8-241D-4731-809F-C1D32F99AF9A","versionStartIncluding":"8.6.2-01","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u171 and 7u161; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."},{"lang":"es","value":"Vulnerabilidad en los componentes Java SE, y JRockit de Oracle Java SE (subcomponente: Serialization). Las versiones compatibles que se han visto afectadas son JavaSE: 6u171 y 7u161; JRockit: R28.3.16. Una vulnerabilidad fácilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de múltiples protocolos comprometa la seguridad de Java SE y JRockit. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de Java SE y JRockit. Nota: Esta vulnerabilidad sólo puede ser explotada proporcionando datos a las API en los Componentes especificados sin emplear aplicaciones Java Web Start que no son de confianza o applets Java que no son de confianza, como a través de un servicio web. CVSS 3.0 Base Score 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}],"id":"CVE-2018-2657","lastModified":"2026-06-17T01:56:03.033","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.0"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2018-2657","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-10-03T19:12:40.369651Z","version":"2.0.3"}}]},"published":"2018-01-18T02:29:21.743","references":[{"source":"secalert_us@oracle.com","tags":["Patch"],"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"},{"source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/102629"},{"source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1040203"},{"source":"secalert_us@oracle.com","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:0100"},{"source":"secalert_us@oracle.com","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:0115"},{"source":"secalert_us@oracle.com","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:0458"},{"source":"secalert_us@oracle.com","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:0521"},{"source":"secalert_us@oracle.com","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:1463"},{"source":"secalert_us@oracle.com","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:1812"},{"source":"secalert_us@oracle.com","tags":["Third Party Advisory"],"url":"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"},{"source":"secalert_us@oracle.com","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20180117-0001/"},{"source":"secalert_us@oracle.com","tags":["Third Party Advisory"],"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03911en_us"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/102629"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1040203"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:0100"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:0115"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:0458"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:0521"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:1463"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:1812"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20180117-0001/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03911en_us"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|