CVE-2018-2799

19.04.2018, 02:29

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.3 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 25%

Affected Products (NVD)

Vendor	Product	Version
oracle	jdk	1.7.0
oracle	jdk	1.8.0
oracle	jre	1.7.0
oracle	jre	1.8.0
oracle	jrockit	r28.3.17
redhat	satellite	5.6
redhat	satellite	5.7
redhat	satellite	5.8
redhat	enterprise_linux_desktop	6.0
redhat	enterprise_linux_desktop	7.0
redhat	enterprise_linux_server	6.0
redhat	enterprise_linux_server	7.0
redhat	enterprise_linux_server_aus	7.6
redhat	enterprise_linux_server_eus	7.5
redhat	enterprise_linux_server_eus	7.6
redhat	enterprise_linux_server_tus	7.6
redhat	enterprise_linux_workstation	6.0
redhat	enterprise_linux_workstation	7.0
debian	debian_linux	8.0
debian	debian_linux	9.0
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	16.04
canonical	ubuntu_linux	17.10
hp	xp7_command_view	*
schneider-electric	struxureware_data_center_expert	𝑥 < 7.6.0
apache	xerces-j	𝑥 < 2.12.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

openjdk-8

sid	8u432-b06-2 fixed

Ubuntu Releases

Ubuntu Product

Codename

openjdk-7

artful	dne
bionic	dne
trusty	Fixed 7u181-2.6.14-0ubuntu0.1 released
xenial	dne

openjdk-8

artful	Fixed 8u171-b11-0ubuntu0.17.10.1 released
bionic	Fixed 8u171-b11-0ubuntu0.18.04.1 released
trusty	dne
xenial	Fixed 8u171-b11-0ubuntu0.16.04.1 released

openSUSE / SLES Releases

openSUSE Product

Release

java-10-openjdk

suse enterprise desktop 15	10.0.1.0-1.30 fixed
suse enterprise sap 15	10.0.1.0-1.30 fixed
suse enterprise sap 15 SP1	10.0.2.0-3.3.3 fixed
suse enterprise server 15	10.0.1.0-1.30 fixed
suse enterprise server 15 SP1	10.0.2.0-3.3.3 fixed

java-10-openjdk-demo

suse enterprise desktop 15	10.0.1.0-1.30 fixed
suse enterprise sap 15	10.0.1.0-1.30 fixed
suse enterprise sap 15 SP1	10.0.2.0-3.3.3 fixed
suse enterprise server 15	10.0.1.0-1.30 fixed
suse enterprise server 15 SP1	10.0.2.0-3.3.3 fixed

java-10-openjdk-devel

suse enterprise desktop 15	10.0.1.0-1.30 fixed
suse enterprise sap 15	10.0.1.0-1.30 fixed
suse enterprise sap 15 SP1	10.0.2.0-3.3.3 fixed
suse enterprise server 15	10.0.1.0-1.30 fixed
suse enterprise server 15 SP1	10.0.2.0-3.3.3 fixed

java-10-openjdk-headless

suse enterprise desktop 15	10.0.1.0-1.30 fixed
suse enterprise sap 15	10.0.1.0-1.30 fixed
suse enterprise sap 15 SP1	10.0.2.0-3.3.3 fixed
suse enterprise server 15	10.0.1.0-1.30 fixed
suse enterprise server 15 SP1	10.0.2.0-3.3.3 fixed

java-11-openjdk

suse enterprise desktop 15 SP1	11.0.3.0-3.24.1 fixed
suse enterprise desktop 15 SP2	11.0.7.0-3.42.4 fixed
suse enterprise desktop 15 SP3	11.0.10.0-3.53.1 fixed
suse enterprise desktop 15 SP4	11.0.15.0-150000.3.80.1 fixed
suse enterprise desktop 15 SP5	11.0.19.0-150000.3.96.1 fixed
suse enterprise sap 12 SP5	11.0.4.0-1.26 fixed
suse enterprise sap 15 SP1	11.0.3.0-3.24.1 fixed
suse enterprise sap 15 SP2	11.0.7.0-3.42.4 fixed
suse enterprise sap 15 SP3	11.0.10.0-3.53.1 fixed
suse enterprise sap 15 SP4	11.0.15.0-150000.3.80.1 fixed
suse enterprise sap 15 SP5	11.0.19.0-150000.3.96.1 fixed
suse enterprise sap 15 SP6	11.0.22.0-150000.3.110.1 fixed
suse enterprise sap 15 SP7	11.0.26.0-150000.3.122.1 fixed
suse enterprise server 12 SP5	11.0.4.0-1.26 fixed
suse enterprise server 15 SP1	11.0.3.0-3.24.1 fixed
suse enterprise server 15 SP2	11.0.7.0-3.42.4 fixed
suse enterprise server 15 SP3	11.0.10.0-3.53.1 fixed
suse enterprise server 15 SP4	11.0.15.0-150000.3.80.1 fixed
suse enterprise server 15 SP5	11.0.19.0-150000.3.96.1 fixed
suse enterprise server 15 SP6	11.0.22.0-150000.3.110.1 fixed
suse enterprise server 15 SP7	11.0.26.0-150000.3.122.1 fixed

java-11-openjdk-demo

suse enterprise desktop 15 SP1	11.0.3.0-3.24.1 fixed
suse enterprise desktop 15 SP2	11.0.7.0-3.42.4 fixed
suse enterprise desktop 15 SP3	11.0.10.0-3.53.1 fixed
suse enterprise desktop 15 SP4	11.0.15.0-150000.3.80.1 fixed
suse enterprise desktop 15 SP5	11.0.19.0-150000.3.96.1 fixed
suse enterprise sap 12 SP5	11.0.4.0-1.26 fixed
suse enterprise sap 15 SP1	11.0.3.0-3.24.1 fixed
suse enterprise sap 15 SP2	11.0.7.0-3.42.4 fixed
suse enterprise sap 15 SP3	11.0.10.0-3.53.1 fixed
suse enterprise sap 15 SP4	11.0.15.0-150000.3.80.1 fixed
suse enterprise sap 15 SP5	11.0.19.0-150000.3.96.1 fixed
suse enterprise sap 15 SP6	11.0.22.0-150000.3.110.1 fixed
suse enterprise sap 15 SP7	11.0.26.0-150000.3.122.1 fixed
suse enterprise server 12 SP5	11.0.4.0-1.26 fixed
suse enterprise server 15 SP1	11.0.3.0-3.24.1 fixed
suse enterprise server 15 SP2	11.0.7.0-3.42.4 fixed
suse enterprise server 15 SP3	11.0.10.0-3.53.1 fixed
suse enterprise server 15 SP4	11.0.15.0-150000.3.80.1 fixed
suse enterprise server 15 SP5	11.0.19.0-150000.3.96.1 fixed
suse enterprise server 15 SP6	11.0.22.0-150000.3.110.1 fixed
suse enterprise server 15 SP7	11.0.26.0-150000.3.122.1 fixed

java-11-openjdk-devel

suse enterprise desktop 15 SP1	11.0.3.0-3.24.1 fixed
suse enterprise desktop 15 SP2	11.0.7.0-3.42.4 fixed
suse enterprise desktop 15 SP3	11.0.10.0-3.53.1 fixed
suse enterprise desktop 15 SP4	11.0.15.0-150000.3.80.1 fixed
suse enterprise desktop 15 SP5	11.0.19.0-150000.3.96.1 fixed
suse enterprise sap 12 SP5	11.0.4.0-1.26 fixed
suse enterprise sap 15 SP1	11.0.3.0-3.24.1 fixed
suse enterprise sap 15 SP2	11.0.7.0-3.42.4 fixed
suse enterprise sap 15 SP3	11.0.10.0-3.53.1 fixed
suse enterprise sap 15 SP4	11.0.15.0-150000.3.80.1 fixed
suse enterprise sap 15 SP5	11.0.19.0-150000.3.96.1 fixed
suse enterprise sap 15 SP6	11.0.22.0-150000.3.110.1 fixed
suse enterprise sap 15 SP7	11.0.26.0-150000.3.122.1 fixed
suse enterprise server 12 SP5	11.0.4.0-1.26 fixed
suse enterprise server 15 SP1	11.0.3.0-3.24.1 fixed
suse enterprise server 15 SP2	11.0.7.0-3.42.4 fixed
suse enterprise server 15 SP3	11.0.10.0-3.53.1 fixed
suse enterprise server 15 SP4	11.0.15.0-150000.3.80.1 fixed
suse enterprise server 15 SP5	11.0.19.0-150000.3.96.1 fixed
suse enterprise server 15 SP6	11.0.22.0-150000.3.110.1 fixed
suse enterprise server 15 SP7	11.0.26.0-150000.3.122.1 fixed

java-11-openjdk-headless

suse enterprise desktop 15 SP1	11.0.3.0-3.24.1 fixed
suse enterprise desktop 15 SP2	11.0.7.0-3.42.4 fixed
suse enterprise desktop 15 SP3	11.0.10.0-3.53.1 fixed
suse enterprise desktop 15 SP4	11.0.15.0-150000.3.80.1 fixed
suse enterprise desktop 15 SP5	11.0.19.0-150000.3.96.1 fixed
suse enterprise sap 12 SP5	11.0.4.0-1.26 fixed
suse enterprise sap 15 SP1	11.0.3.0-3.24.1 fixed
suse enterprise sap 15 SP2	11.0.7.0-3.42.4 fixed
suse enterprise sap 15 SP3	11.0.10.0-3.53.1 fixed
suse enterprise sap 15 SP4	11.0.15.0-150000.3.80.1 fixed
suse enterprise sap 15 SP5	11.0.19.0-150000.3.96.1 fixed
suse enterprise sap 15 SP6	11.0.22.0-150000.3.110.1 fixed
suse enterprise sap 15 SP7	11.0.26.0-150000.3.122.1 fixed
suse enterprise server 12 SP5	11.0.4.0-1.26 fixed
suse enterprise server 15 SP1	11.0.3.0-3.24.1 fixed
suse enterprise server 15 SP2	11.0.7.0-3.42.4 fixed
suse enterprise server 15 SP3	11.0.10.0-3.53.1 fixed
suse enterprise server 15 SP4	11.0.15.0-150000.3.80.1 fixed
suse enterprise server 15 SP5	11.0.19.0-150000.3.96.1 fixed
suse enterprise server 15 SP6	11.0.22.0-150000.3.110.1 fixed
suse enterprise server 15 SP7	11.0.26.0-150000.3.122.1 fixed

java-1_7_0-openjdk

suse enterprise sap 12 SP1	1.7.0.181-43.15.2 fixed
suse enterprise sap 12 SP2	1.7.0.181-43.15.2 fixed
suse enterprise sap 12 SP3	1.7.0.181-43.15.2 fixed
suse enterprise sap 12 SP5	1.7.0.231-43.27.2 fixed
suse enterprise server 12	1.7.0.181-43.15.2 fixed
suse enterprise server 12 SP1	1.7.0.181-43.15.2 fixed
suse enterprise server 12 SP2	1.7.0.181-43.15.2 fixed
suse enterprise server 12 SP3	1.7.0.181-43.15.2 fixed
suse enterprise server 12 SP5	1.7.0.231-43.27.2 fixed

java-1_7_0-openjdk-demo

suse enterprise sap 12 SP1	1.7.0.181-43.15.2 fixed
suse enterprise sap 12 SP2	1.7.0.181-43.15.2 fixed
suse enterprise sap 12 SP3	1.7.0.181-43.15.2 fixed
suse enterprise sap 12 SP5	1.7.0.231-43.27.2 fixed
suse enterprise server 12	1.7.0.181-43.15.2 fixed
suse enterprise server 12 SP1	1.7.0.181-43.15.2 fixed
suse enterprise server 12 SP2	1.7.0.181-43.15.2 fixed
suse enterprise server 12 SP3	1.7.0.181-43.15.2 fixed
suse enterprise server 12 SP5	1.7.0.231-43.27.2 fixed

java-1_7_0-openjdk-devel

suse enterprise sap 12 SP1	1.7.0.181-43.15.2 fixed
suse enterprise sap 12 SP2	1.7.0.181-43.15.2 fixed
suse enterprise sap 12 SP3	1.7.0.181-43.15.2 fixed
suse enterprise sap 12 SP5	1.7.0.231-43.27.2 fixed
suse enterprise server 12	1.7.0.181-43.15.2 fixed
suse enterprise server 12 SP1	1.7.0.181-43.15.2 fixed
suse enterprise server 12 SP2	1.7.0.181-43.15.2 fixed
suse enterprise server 12 SP3	1.7.0.181-43.15.2 fixed
suse enterprise server 12 SP5	1.7.0.231-43.27.2 fixed

java-1_7_0-openjdk-headless

suse enterprise sap 12 SP1	1.7.0.181-43.15.2 fixed
suse enterprise sap 12 SP2	1.7.0.181-43.15.2 fixed
suse enterprise sap 12 SP3	1.7.0.181-43.15.2 fixed
suse enterprise sap 12 SP5	1.7.0.231-43.27.2 fixed
suse enterprise server 12	1.7.0.181-43.15.2 fixed
suse enterprise server 12 SP1	1.7.0.181-43.15.2 fixed
suse enterprise server 12 SP2	1.7.0.181-43.15.2 fixed
suse enterprise server 12 SP3	1.7.0.181-43.15.2 fixed
suse enterprise server 12 SP5	1.7.0.231-43.27.2 fixed

java-1_8_0-openjdk

suse enterprise sap 12 SP1	1.8.0.171-27.19.1 fixed
suse enterprise sap 12 SP2	1.8.0.171-27.19.1 fixed
suse enterprise sap 12 SP3	1.8.0.171-27.19.1 fixed
suse enterprise sap 12 SP5	1.8.0.222-27.35.2 fixed
suse enterprise sap 15	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP1	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP2	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP3	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP4	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP5	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP6	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP7	1.8.0.171-3.3.2 fixed
suse enterprise server 12 SP1	1.8.0.171-27.19.1 fixed
suse enterprise server 12 SP2	1.8.0.171-27.19.1 fixed
suse enterprise server 12 SP3	1.8.0.171-27.19.1 fixed
suse enterprise server 12 SP5	1.8.0.222-27.35.2 fixed
suse enterprise server 15	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP1	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP2	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP3	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP4	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP5	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP6	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP7	1.8.0.171-3.3.2 fixed

java-1_8_0-openjdk-demo

suse enterprise sap 12 SP1	1.8.0.171-27.19.1 fixed
suse enterprise sap 12 SP2	1.8.0.171-27.19.1 fixed
suse enterprise sap 12 SP3	1.8.0.171-27.19.1 fixed
suse enterprise sap 12 SP5	1.8.0.222-27.35.2 fixed
suse enterprise sap 15	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP1	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP2	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP3	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP4	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP5	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP6	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP7	1.8.0.171-3.3.2 fixed
suse enterprise server 12 SP1	1.8.0.171-27.19.1 fixed
suse enterprise server 12 SP2	1.8.0.171-27.19.1 fixed
suse enterprise server 12 SP3	1.8.0.171-27.19.1 fixed
suse enterprise server 12 SP5	1.8.0.222-27.35.2 fixed
suse enterprise server 15	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP1	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP2	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP3	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP4	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP5	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP6	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP7	1.8.0.171-3.3.2 fixed

java-1_8_0-openjdk-devel

suse enterprise sap 12 SP1	1.8.0.171-27.19.1 fixed
suse enterprise sap 12 SP2	1.8.0.171-27.19.1 fixed
suse enterprise sap 12 SP3	1.8.0.171-27.19.1 fixed
suse enterprise sap 12 SP5	1.8.0.222-27.35.2 fixed
suse enterprise sap 15	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP1	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP2	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP3	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP4	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP5	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP6	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP7	1.8.0.171-3.3.2 fixed
suse enterprise server 12 SP1	1.8.0.171-27.19.1 fixed
suse enterprise server 12 SP2	1.8.0.171-27.19.1 fixed
suse enterprise server 12 SP3	1.8.0.171-27.19.1 fixed
suse enterprise server 12 SP5	1.8.0.222-27.35.2 fixed
suse enterprise server 15	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP1	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP2	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP3	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP4	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP5	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP6	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP7	1.8.0.171-3.3.2 fixed

java-1_8_0-openjdk-headless

suse enterprise sap 12 SP1	1.8.0.171-27.19.1 fixed
suse enterprise sap 12 SP2	1.8.0.171-27.19.1 fixed
suse enterprise sap 12 SP3	1.8.0.171-27.19.1 fixed
suse enterprise sap 12 SP5	1.8.0.222-27.35.2 fixed
suse enterprise sap 15	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP1	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP2	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP3	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP4	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP5	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP6	1.8.0.171-3.3.2 fixed
suse enterprise sap 15 SP7	1.8.0.171-3.3.2 fixed
suse enterprise server 12 SP1	1.8.0.171-27.19.1 fixed
suse enterprise server 12 SP2	1.8.0.171-27.19.1 fixed
suse enterprise server 12 SP3	1.8.0.171-27.19.1 fixed
suse enterprise server 12 SP5	1.8.0.222-27.35.2 fixed
suse enterprise server 15	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP1	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP2	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP3	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP4	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP5	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP6	1.8.0.171-3.3.2 fixed
suse enterprise server 15 SP7	1.8.0.171-3.3.2 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

java-1.7.0-openjdk

RHEL 6	1:1.7.0.181-2.6.14.1.el6_9 fixed
RHEL 7	1:1.7.0.181-2.6.14.5.el7 fixed

java-1.7.0-openjdk-accessibility

RHEL 7

1:1.7.0.181-2.6.14.5.el7

fixed

java-1.7.0-openjdk-demo

RHEL 6	1:1.7.0.181-2.6.14.1.el6_9 fixed
RHEL 7	1:1.7.0.181-2.6.14.5.el7 fixed

java-1.7.0-openjdk-devel

RHEL 6	1:1.7.0.181-2.6.14.1.el6_9 fixed
RHEL 7	1:1.7.0.181-2.6.14.5.el7 fixed

java-1.7.0-openjdk-headless

RHEL 7

1:1.7.0.181-2.6.14.5.el7

fixed

java-1.7.0-openjdk-javadoc

RHEL 6	1:1.7.0.181-2.6.14.1.el6_9 fixed
RHEL 7	1:1.7.0.181-2.6.14.5.el7 fixed

java-1.7.0-openjdk-src

RHEL 6	1:1.7.0.181-2.6.14.1.el6_9 fixed
RHEL 7	1:1.7.0.181-2.6.14.5.el7 fixed

java-1.7.1-ibm

RHEL 6	1:1.7.1.4.25-1jpp.2.el6_9 fixed
RHEL 7	1:1.7.1.4.25-1jpp.3.el7 fixed

java-1.7.1-ibm-demo

RHEL 6	1:1.7.1.4.25-1jpp.2.el6_9 fixed
RHEL 7	1:1.7.1.4.25-1jpp.3.el7 fixed

java-1.7.1-ibm-devel

RHEL 6	1:1.7.1.4.25-1jpp.2.el6_9 fixed
RHEL 7	1:1.7.1.4.25-1jpp.3.el7 fixed

java-1.7.1-ibm-jdbc

RHEL 6	1:1.7.1.4.25-1jpp.2.el6_9 fixed
RHEL 7	1:1.7.1.4.25-1jpp.3.el7 fixed

java-1.7.1-ibm-plugin

RHEL 6	1:1.7.1.4.25-1jpp.2.el6_9 fixed
RHEL 7	1:1.7.1.4.25-1jpp.3.el7 fixed

java-1.7.1-ibm-src

RHEL 6	1:1.7.1.4.25-1jpp.2.el6_9 fixed
RHEL 7	1:1.7.1.4.25-1jpp.3.el7 fixed

java-1.8.0-ibm

RHEL 6	1:1.8.0.5.15-1jpp.2.el6_9 fixed
RHEL 7	1:1.8.0.5.15-1jpp.5.el7 fixed

java-1.8.0-ibm-demo

RHEL 6	1:1.8.0.5.15-1jpp.2.el6_9 fixed
RHEL 7	1:1.8.0.5.15-1jpp.5.el7 fixed

java-1.8.0-ibm-devel

RHEL 6	1:1.8.0.5.15-1jpp.2.el6_9 fixed
RHEL 7	1:1.8.0.5.15-1jpp.5.el7 fixed

java-1.8.0-ibm-jdbc

RHEL 6	1:1.8.0.5.15-1jpp.2.el6_9 fixed
RHEL 7	1:1.8.0.5.15-1jpp.5.el7 fixed

java-1.8.0-ibm-plugin

RHEL 6	1:1.8.0.5.15-1jpp.2.el6_9 fixed
RHEL 7	1:1.8.0.5.15-1jpp.5.el7 fixed

java-1.8.0-ibm-src

RHEL 6	1:1.8.0.5.15-1jpp.2.el6_9 fixed
RHEL 7	1:1.8.0.5.15-1jpp.5.el7 fixed

java-1.8.0-openjdk

RHEL 6	1:1.8.0.171-3.b10.el6_9 fixed
RHEL 7	1:1.8.0.171-7.b10.el7 fixed

java-1.8.0-openjdk-accessibility

RHEL 7

1:1.8.0.171-7.b10.el7

fixed

java-1.8.0-openjdk-accessibility-debug

RHEL 7

1:1.8.0.171-7.b10.el7

fixed

java-1.8.0-openjdk-debug

RHEL 6	1:1.8.0.171-3.b10.el6_9 fixed
RHEL 7	1:1.8.0.171-7.b10.el7 fixed

java-1.8.0-openjdk-demo

RHEL 6	1:1.8.0.171-3.b10.el6_9 fixed
RHEL 7	1:1.8.0.171-7.b10.el7 fixed

java-1.8.0-openjdk-demo-debug

RHEL 6	1:1.8.0.171-3.b10.el6_9 fixed
RHEL 7	1:1.8.0.171-7.b10.el7 fixed

java-1.8.0-openjdk-devel

RHEL 6	1:1.8.0.171-3.b10.el6_9 fixed
RHEL 7	1:1.8.0.171-7.b10.el7 fixed

java-1.8.0-openjdk-devel-debug

RHEL 6	1:1.8.0.171-3.b10.el6_9 fixed
RHEL 7	1:1.8.0.171-7.b10.el7 fixed

java-1.8.0-openjdk-headless

RHEL 6	1:1.8.0.171-3.b10.el6_9 fixed
RHEL 7	1:1.8.0.171-7.b10.el7 fixed

java-1.8.0-openjdk-headless-debug

RHEL 6	1:1.8.0.171-3.b10.el6_9 fixed
RHEL 7	1:1.8.0.171-7.b10.el7 fixed

java-1.8.0-openjdk-javadoc

RHEL 6	1:1.8.0.171-3.b10.el6_9 fixed
RHEL 7	1:1.8.0.171-7.b10.el7 fixed

java-1.8.0-openjdk-javadoc-debug

RHEL 6	1:1.8.0.171-3.b10.el6_9 fixed
RHEL 7	1:1.8.0.171-7.b10.el7 fixed

java-1.8.0-openjdk-javadoc-zip

RHEL 7

1:1.8.0.171-7.b10.el7

fixed

java-1.8.0-openjdk-javadoc-zip-debug

RHEL 7

1:1.8.0.171-7.b10.el7

fixed

java-1.8.0-openjdk-src

RHEL 6	1:1.8.0.171-3.b10.el6_9 fixed
RHEL 7	1:1.8.0.171-7.b10.el7 fixed

java-1.8.0-openjdk-src-debug

RHEL 6	1:1.8.0.171-3.b10.el6_9 fixed
RHEL 7	1:1.8.0.171-7.b10.el7 fixed

References

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

http://www.securityfocus.com/bid/103872

http://www.securitytracker.com/id/1040697

https://access.redhat.com/errata/RHSA-2018:1188

https://access.redhat.com/errata/RHSA-2018:1191

https://access.redhat.com/errata/RHSA-2018:1201

https://access.redhat.com/errata/RHSA-2018:1202

https://access.redhat.com/errata/RHSA-2018:1204

https://access.redhat.com/errata/RHSA-2018:1206

https://access.redhat.com/errata/RHSA-2018:1270

https://access.redhat.com/errata/RHSA-2018:1278

https://access.redhat.com/errata/RHSA-2018:1721

https://access.redhat.com/errata/RHSA-2018:1722

https://access.redhat.com/errata/RHSA-2018:1723

https://access.redhat.com/errata/RHSA-2018:1724

https://access.redhat.com/errata/RHSA-2018:1974

https://access.redhat.com/errata/RHSA-2018:1975

https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0

https://lists.apache.org/thread.html/49dc6702104a86ecbb40292dcd329ce9ae4c32b74733199ecab14a73%40%3Cj-users.xerces.apache.org%3E

https://lists.apache.org/thread.html/b53d4601ecd9ec63c799dbe1bc5b78e0d52f4cef429da2dfe63cf06d%40%3Cfop-dev.xmlgraphics.apache.org%3E

https://lists.apache.org/thread.html/r449b5d89c7b2ba3762584cf6c38e01867d4b24706e023cf2a9911307%40%3Cuser.spark.apache.org%3E

https://security.gentoo.org/glsa/201903-14

https://security.netapp.com/advisory/ntap-20180419-0001/

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03857en_us

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03915en_us

https://usn.ubuntu.com/3644-1/

https://usn.ubuntu.com/3691-1/

https://www.debian.org/security/2018/dsa-4185

https://www.debian.org/security/2018/dsa-4225

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

http://www.securityfocus.com/bid/103872

http://www.securitytracker.com/id/1040697

https://access.redhat.com/errata/RHSA-2018:1188

https://access.redhat.com/errata/RHSA-2018:1191

https://access.redhat.com/errata/RHSA-2018:1201

https://access.redhat.com/errata/RHSA-2018:1202

https://access.redhat.com/errata/RHSA-2018:1204

https://access.redhat.com/errata/RHSA-2018:1206

https://access.redhat.com/errata/RHSA-2018:1270

https://access.redhat.com/errata/RHSA-2018:1278

https://access.redhat.com/errata/RHSA-2018:1721

https://access.redhat.com/errata/RHSA-2018:1722

https://access.redhat.com/errata/RHSA-2018:1723

https://access.redhat.com/errata/RHSA-2018:1724

https://access.redhat.com/errata/RHSA-2018:1974

https://access.redhat.com/errata/RHSA-2018:1975

https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0

https://lists.apache.org/thread.html/49dc6702104a86ecbb40292dcd329ce9ae4c32b74733199ecab14a73%40%3Cj-users.xerces.apache.org%3E

https://lists.apache.org/thread.html/b53d4601ecd9ec63c799dbe1bc5b78e0d52f4cef429da2dfe63cf06d%40%3Cfop-dev.xmlgraphics.apache.org%3E

https://lists.apache.org/thread.html/r449b5d89c7b2ba3762584cf6c38e01867d4b24706e023cf2a9911307%40%3Cuser.spark.apache.org%3E

https://security.gentoo.org/glsa/201903-14

https://security.netapp.com/advisory/ntap-20180419-0001/

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03857en_us

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03915en_us

https://usn.ubuntu.com/3644-1/

https://usn.ubuntu.com/3691-1/

https://www.debian.org/security/2018/dsa-4185

https://www.debian.org/security/2018/dsa-4225