ByteOS Network

Vulnerability Details :

CVE-2018-3183

Assigner-oracle

Assigner Org ID-43595867-4340-4103-b7a2-9a5208d29a85

Published At-17 Oct, 2018 | 01:00

Updated At-02 Oct, 2024 | 19:38

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supported versions that are affected are Java SE: 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:oracle

Assigner Org ID:43595867-4340-4103-b7a2-9a5208d29a85

Published At:17 Oct, 2018 | 01:00

Updated At:02 Oct, 2024 | 19:38

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

Oracle Corporation

Product

Java

Versions

Affected

Java SE: 8u181, 11
Java SE Embedded: 8u181
JRockit: R28.3.19

Problem Types

Type	CWE ID	Description
text	N/A	Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit.

Type: text

CWE ID: N/A

Description: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit.

References

Hyperlink	Resource
https://security.netapp.com/advisory/ntap-20181018-0001/	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:2942	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:3534	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:3003	vendor-advisory x_refsource_REDHAT
http://www.securityfocus.com/bid/105622	vdb-entry x_refsource_BID
https://usn.ubuntu.com/3804-1/	vendor-advisory x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:3002	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:3852	vendor-advisory x_refsource_REDHAT
https://www.debian.org/security/2018/dsa-4326	vendor-advisory x_refsource_DEBIAN
https://access.redhat.com/errata/RHSA-2018:2943	vendor-advisory x_refsource_REDHAT
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:3533	vendor-advisory x_refsource_REDHAT
http://www.securitytracker.com/id/1041889	vdb-entry x_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2018:3521	vendor-advisory x_refsource_REDHAT
https://security.gentoo.org/glsa/201908-10	vendor-advisory x_refsource_GENTOO
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03952en_us	x_refsource_CONFIRM

Hyperlink: https://security.netapp.com/advisory/ntap-20181018-0001/

Resource:

x_refsource_CONFIRM

Hyperlink: https://access.redhat.com/errata/RHSA-2018:2942

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2018:3534

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2018:3003

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.securityfocus.com/bid/105622

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://usn.ubuntu.com/3804-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://access.redhat.com/errata/RHSA-2018:3002

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2018:3852

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://www.debian.org/security/2018/dsa-4326

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://access.redhat.com/errata/RHSA-2018:2943

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Resource:

x_refsource_CONFIRM

Hyperlink: https://access.redhat.com/errata/RHSA-2018:3533

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.securitytracker.com/id/1041889

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://access.redhat.com/errata/RHSA-2018:3521

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://security.gentoo.org/glsa/201908-10

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03952en_us

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://security.netapp.com/advisory/ntap-20181018-0001/	x_refsource_CONFIRM x_transferred
https://access.redhat.com/errata/RHSA-2018:2942	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2018:3534	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2018:3003	vendor-advisory x_refsource_REDHAT x_transferred
http://www.securityfocus.com/bid/105622	vdb-entry x_refsource_BID x_transferred
https://usn.ubuntu.com/3804-1/	vendor-advisory x_refsource_UBUNTU x_transferred
https://access.redhat.com/errata/RHSA-2018:3002	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2018:3852	vendor-advisory x_refsource_REDHAT x_transferred
https://www.debian.org/security/2018/dsa-4326	vendor-advisory x_refsource_DEBIAN x_transferred
https://access.redhat.com/errata/RHSA-2018:2943	vendor-advisory x_refsource_REDHAT x_transferred
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	x_refsource_CONFIRM x_transferred
https://access.redhat.com/errata/RHSA-2018:3533	vendor-advisory x_refsource_REDHAT x_transferred
http://www.securitytracker.com/id/1041889	vdb-entry x_refsource_SECTRACK x_transferred
https://access.redhat.com/errata/RHSA-2018:3521	vendor-advisory x_refsource_REDHAT x_transferred
https://security.gentoo.org/glsa/201908-10	vendor-advisory x_refsource_GENTOO x_transferred
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03952en_us	x_refsource_CONFIRM x_transferred

Hyperlink: https://security.netapp.com/advisory/ntap-20181018-0001/

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2018:2942

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2018:3534

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2018:3003

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.securityfocus.com/bid/105622

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://usn.ubuntu.com/3804-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2018:3002

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2018:3852

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://www.debian.org/security/2018/dsa-4326

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2018:2943

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2018:3533

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.securitytracker.com/id/1041889

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2018:3521

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://security.gentoo.org/glsa/201908-10

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03952en_us

Resource:

x_refsource_CONFIRM

x_transferred

2. CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secalert_us@oracle.com

Published At:17 Oct, 2018 | 01:31

Updated At:27 Jun, 2022 | 17:33

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.0	CRITICAL	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 9.0

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 6.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

Oracle Corporation

>>jdk>>1.8.0

cpe:2.3:a:oracle:jdk:1.8.0:update181:*:*:*:*:*:*

Oracle Corporation

>>jdk>>11.0.0

cpe:2.3:a:oracle:jdk:11.0.0:*:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.8.0

cpe:2.3:a:oracle:jre:1.8.0:update181:*:*:*:*:*:*

Oracle Corporation

>>jre>>11.0.0

cpe:2.3:a:oracle:jre:11.0.0:*:*:*:*:*:*:*

Oracle Corporation

>>jrockit>>r28.3.19

cpe:2.3:a:oracle:jrockit:r28.3.19:*:*:*:*:*:*:*

Red Hat, Inc.

>>satellite>>5.8

cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_desktop>>6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_desktop>>7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_eus>>7.6

cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server>>6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server>>7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server_aus>>7.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server_eus>>7.5

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server_tus>>7.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_workstation>>6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_workstation>>7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>9.0

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

Canonical Ltd.

>>ubuntu_linux>>18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

Canonical Ltd.

>>ubuntu_linux>>18.10

cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

HP Inc.

>>xp7_command_view>>Versions before 8.6.3-00(exclusive)

cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov