{"schemaVersion":3,"id":"RHSA-2017:0338","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Red Hat Security Advisory: java-1.6.0-ibm security update","dates":{"published":"2024-09-29T17:07:28.000Z","modified":"2026-10-09T10:01:20.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"OSV · Red hat","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","computed":true,"selection":"version-preference"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"OSV · Red hat","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true}]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"redhat","product":"java-1.6.0-ibm","name":"java-1.6.0-ibm","label":"java-1.6.0-ibm","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/java-1.6.0-ibm","purlType":"rpm","versions":[{"text":"< 1:1.6.0.16.41-1jpp.1.el5_11","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.6.0.16.41-1jpp.1.el6_8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.6.0.16.41-1jpp.1.el5_11 | < 1:1.6.0.16.41-1jpp.1.el6_8","eol":null,"hubHref":null},{"vendor":"redhat","product":"java-1.6.0-ibm-accessibility","name":"java-1.6.0-ibm-accessibility","label":"java-1.6.0-ibm-accessibility","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/java-1.6.0-ibm-accessibility","purlType":"rpm","versions":[{"text":"< 1:1.6.0.16.41-1jpp.1.el5_11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.6.0.16.41-1jpp.1.el5_11","eol":null,"hubHref":null},{"vendor":"redhat","product":"java-1.6.0-ibm-demo","name":"java-1.6.0-ibm-demo","label":"java-1.6.0-ibm-demo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/java-1.6.0-ibm-demo","purlType":"rpm","versions":[{"text":"< 1:1.6.0.16.41-1jpp.1.el5_11","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.6.0.16.41-1jpp.1.el6_8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.6.0.16.41-1jpp.1.el5_11 | < 1:1.6.0.16.41-1jpp.1.el6_8","eol":null,"hubHref":null},{"vendor":"redhat","product":"java-1.6.0-ibm-devel","name":"java-1.6.0-ibm-devel","label":"java-1.6.0-ibm-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/java-1.6.0-ibm-devel","purlType":"rpm","versions":[{"text":"< 1:1.6.0.16.41-1jpp.1.el5_11","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.6.0.16.41-1jpp.1.el6_8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.6.0.16.41-1jpp.1.el5_11 | < 1:1.6.0.16.41-1jpp.1.el6_8","eol":null,"hubHref":null},{"vendor":"redhat","product":"java-1.6.0-ibm-javacomm","name":"java-1.6.0-ibm-javacomm","label":"java-1.6.0-ibm-javacomm","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/java-1.6.0-ibm-javacomm","purlType":"rpm","versions":[{"text":"< 1:1.6.0.16.41-1jpp.1.el5_11","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.6.0.16.41-1jpp.1.el6_8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.6.0.16.41-1jpp.1.el5_11 | < 1:1.6.0.16.41-1jpp.1.el6_8","eol":null,"hubHref":null},{"vendor":"redhat","product":"java-1.6.0-ibm-jdbc","name":"java-1.6.0-ibm-jdbc","label":"java-1.6.0-ibm-jdbc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/java-1.6.0-ibm-jdbc","purlType":"rpm","versions":[{"text":"< 1:1.6.0.16.41-1jpp.1.el5_11","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.6.0.16.41-1jpp.1.el6_8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.6.0.16.41-1jpp.1.el5_11 | < 1:1.6.0.16.41-1jpp.1.el6_8","eol":null,"hubHref":null},{"vendor":"redhat","product":"java-1.6.0-ibm-plugin","name":"java-1.6.0-ibm-plugin","label":"java-1.6.0-ibm-plugin","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/java-1.6.0-ibm-plugin","purlType":"rpm","versions":[{"text":"< 1:1.6.0.16.41-1jpp.1.el5_11","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.6.0.16.41-1jpp.1.el6_8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.6.0.16.41-1jpp.1.el5_11 | < 1:1.6.0.16.41-1jpp.1.el6_8","eol":null,"hubHref":null},{"vendor":"redhat","product":"java-1.6.0-ibm-src","name":"java-1.6.0-ibm-src","label":"java-1.6.0-ibm-src","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/java-1.6.0-ibm-src","purlType":"rpm","versions":[{"text":"< 1:1.6.0.16.41-1jpp.1.el5_11","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.6.0.16.41-1jpp.1.el6_8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.6.0.16.41-1jpp.1.el5_11 | < 1:1.6.0.16.41-1jpp.1.el6_8","eol":null,"hubHref":null}],"affectedCount":8,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2017:0338","label":"access.redhat.com/errata/RHSA-2017:0338","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://developer.ibm.com/javasdk/support/security-vulnerabilities/","label":"developer.ibm.com/javasdk/support/security-vulnerabilities/","hostname":"developer.ibm.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1369383","label":"bugzilla.redhat.com/show_bug.cgi?id=1369383","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413554","label":"bugzilla.redhat.com/show_bug.cgi?id=1413554","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413583","label":"bugzilla.redhat.com/show_bug.cgi?id=1413583","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413653","label":"bugzilla.redhat.com/show_bug.cgi?id=1413653","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413717","label":"bugzilla.redhat.com/show_bug.cgi?id=1413717","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413882","label":"bugzilla.redhat.com/show_bug.cgi?id=1413882","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413906","label":"bugzilla.redhat.com/show_bug.cgi?id=1413906","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413911","label":"bugzilla.redhat.com/show_bug.cgi?id=1413911","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413920","label":"bugzilla.redhat.com/show_bug.cgi?id=1413920","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413923","label":"bugzilla.redhat.com/show_bug.cgi?id=1413923","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413955","label":"bugzilla.redhat.com/show_bug.cgi?id=1413955","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414163","label":"bugzilla.redhat.com/show_bug.cgi?id=1414163","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0338.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0338.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2183","label":"access.redhat.com/security/cve/CVE-2016-2183","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2183","label":"www.cve.org/CVERecord?id=CVE-2016-2183","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2183","label":"nvd.nist.gov/vuln/detail/CVE-2016-2183","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/articles/2548661","label":"access.redhat.com/articles/2548661","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1940","label":"access.redhat.com/errata/RHSA-2016:1940","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://sweet32.info/","label":"sweet32.info","hostname":"sweet32.info","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5546","label":"access.redhat.com/security/cve/CVE-2016-5546","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5546","label":"www.cve.org/CVERecord?id=CVE-2016-5546","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5546","label":"nvd.nist.gov/vuln/detail/CVE-2016-5546","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5548","label":"access.redhat.com/security/cve/CVE-2016-5548","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5548","label":"www.cve.org/CVERecord?id=CVE-2016-5548","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5548","label":"nvd.nist.gov/vuln/detail/CVE-2016-5548","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5549","label":"access.redhat.com/security/cve/CVE-2016-5549","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5549","label":"www.cve.org/CVERecord?id=CVE-2016-5549","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5549","label":"nvd.nist.gov/vuln/detail/CVE-2016-5549","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5552","label":"access.redhat.com/security/cve/CVE-2016-5552","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5552","label":"www.cve.org/CVERecord?id=CVE-2016-5552","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5552","label":"nvd.nist.gov/vuln/detail/CVE-2016-5552","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3231","label":"access.redhat.com/security/cve/CVE-2017-3231","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3231","label":"www.cve.org/CVERecord?id=CVE-2017-3231","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3231","label":"nvd.nist.gov/vuln/detail/CVE-2017-3231","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3241","label":"access.redhat.com/security/cve/CVE-2017-3241","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3241","label":"www.cve.org/CVERecord?id=CVE-2017-3241","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3241","label":"nvd.nist.gov/vuln/detail/CVE-2017-3241","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3252","label":"access.redhat.com/security/cve/CVE-2017-3252","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3252","label":"www.cve.org/CVERecord?id=CVE-2017-3252","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3252","label":"nvd.nist.gov/vuln/detail/CVE-2017-3252","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3253","label":"access.redhat.com/security/cve/CVE-2017-3253","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3253","label":"www.cve.org/CVERecord?id=CVE-2017-3253","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3253","label":"nvd.nist.gov/vuln/detail/CVE-2017-3253","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3259","label":"access.redhat.com/security/cve/CVE-2017-3259","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3259","label":"www.cve.org/CVERecord?id=CVE-2017-3259","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3259","label":"nvd.nist.gov/vuln/detail/CVE-2017-3259","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixJAVA","label":"www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html","hostname":"www.oracle.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3261","label":"access.redhat.com/security/cve/CVE-2017-3261","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3261","label":"www.cve.org/CVERecord?id=CVE-2017-3261","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3261","label":"nvd.nist.gov/vuln/detail/CVE-2017-3261","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3272","label":"access.redhat.com/security/cve/CVE-2017-3272","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3272","label":"www.cve.org/CVERecord?id=CVE-2017-3272","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3272","label":"nvd.nist.gov/vuln/detail/CVE-2017-3272","hostname":"nvd.nist.gov","tags":["Advisory"]}],"lineage":{"upstream":["CVE-2016-2183","CVE-2016-5546","CVE-2016-5548","CVE-2016-5549","CVE-2016-5552","CVE-2017-3231","CVE-2017-3241","CVE-2017-3252","CVE-2017-3253","CVE-2017-3259","CVE-2017-3261","CVE-2017-3272"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-09-29T17:07:28.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-09T10:01:20.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":35,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T13:41:29.917Z","stale":false,"partial":false}}