CVE-2013-0422
highPriorität · handeln · 90OT-Risiko · kritischKEV · ausgenutztEPSS 0.970 · 100. PerzentilExploit · waffenfähigEURUUShinzugefügt 2022-05-25beheben bis 2022-06-15
erforderliche Maßnahme Apply updates per vendor instructions.
EPSS · bewertet 2026-10-27
Oracle JRE Remote Code Execution Vulnerability
Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a private MBeanInstantiator object, then retrieving arbitrary Class references using the findClass method, and (2) using the Reflection API with recursion in a way that bypasses a security check by the java.lang.invoke.MethodHandles.Lookup.checkSecurityManager method due to the inability of the sun.reflect.Reflection.getCallerClass method to skip frames related to the new reflection API, as exploited in the wild in January 2013, as demonstrated by Blackhole and Nuclear Pack, and a different vulnerability than CVE-2012-4681 and CVE-2012-3174. NOTE: some parties have mapped the recursive Reflection API issue to CVE-2012-3174, but CVE-2012-3174 is for a different vulnerability whose details are not public as of 20130114. CVE-2013-0422 covers both the JMX/MBean and Reflection API issues. NOTE: it was originally reported that Java 6 was also vulnerable, but the reporter has retracted this claim, stating that Java 6 is not exploitable because the relevant code is called in a way that does not bypass security checks. NOTE: as of 20130114, a reliable third party has claimed that the findClass/MBeanInstantiator vector was not fixed in Oracle Java 7 Update 11. If there is still a vulnerable condition, then a separate CVE identifier might be created for the unfixed issue.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- Behobenjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.src as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.src as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.src as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.el5_9.1.src as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-javadoc-1:1.7.0.9-2.3.4.1.el6_3.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-javadoc-1:1.7.0.9-2.3.4.1.el6_3.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-javadoc-1:1.7.0.9-2.3.4.1.el6_3.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-javadoc-1:1.7.0.9-2.3.4.1.el6_3.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-javadoc-1:1.7.0.9-2.3.4.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-javadoc-1:1.7.0.9-2.3.4.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-src-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-src-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-src-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-src-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-src-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-src-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-src-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-src-1:1.7.0.9-2.3.4.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165 - Behobenjava-1.7.0-openjdk-src-1:1.7.0.9-2.3.4.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–critical · 6.8–10
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
Exploits (2)
Öffentlicher Proof-of-Concept- und Exploit-Code.
- exploit/multi/browser/java_jre17_jmxbeanJava Applet JMX Remote Code Executionwaffenfähig · metasploit
- EDB-24045Java Applet JMX - Remote Code Execution (Metasploit) (1)funktional · exploit_db
betroffene Produkte (93)
Betroffene Produkte und Versionsbereiche.
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- RHSA-2013:0165Red Hat Security Advisory: java-1.7.0-openjdk security update2013-01-16csaf · redhat_csafUS
Updated java-1.7.0-openjdk packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
auch bekannt als (4)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (47)
Externe Belege — Patches, Meldungen, Analysen.
- http://blog.fireeye.com/research/2013/01/happy-new-year-from-new-java-zero-day.htmlcnnvd
- http://krebsonsecurity.com/2013/01/zero-day-java-exploit-debuts-in-crimeware/cnnvd
- http://labs.alienvault.com/labs/index.php/2013/new-year-new-java-zeroday/cnnvd
- http://malware.dontneedcoffee.com/2013/01/0-day-17u10-spotted-in-while-disable.htmlcnnvd
- http://www.kb.cert.org/vuls/id/625617cnnvd
- http://www.oracle.com/technetwork/topics/security/alert-cve-2013-0422-1896849.htmlPatchcnnvd
- http://www.securityfocus.com/bid/57246cnnvd
- https://threatpost.com/en_us/blogs/nasty-new-java-zero-day-found-exploit-kits-already-have-it-011013cnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan