{"schemaVersion":3,"id":"RHSA-2017:2424","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Red Hat Security Advisory: java-1.7.0-openjdk security update","dates":{"published":"2024-09-13T14:41:54.000Z","modified":"2026-06-29T10:17:14.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"OSV · Red hat","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","computed":true,"selection":"version-preference"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"OSV · Red hat","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true}]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"redhat","product":"java-1.7.0-openjdk","name":"java-1.7.0-openjdk","label":"java-1.7.0-openjdk","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/java-1.7.0-openjdk","purlType":"rpm","versions":[{"text":"< 1:1.7.0.151-2.6.11.0.el6_9","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.7.0.151-2.6.11.1.el7_4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.7.0.151-2.6.11.0.el6_9 | < 1:1.7.0.151-2.6.11.1.el7_4","eol":null,"hubHref":null},{"vendor":"redhat","product":"java-1.7.0-openjdk-accessibility","name":"java-1.7.0-openjdk-accessibility","label":"java-1.7.0-openjdk-accessibility","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/java-1.7.0-openjdk-accessibility","purlType":"rpm","versions":[{"text":"< 1:1.7.0.151-2.6.11.1.el7_4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.7.0.151-2.6.11.1.el7_4","eol":null,"hubHref":null},{"vendor":"redhat","product":"java-1.7.0-openjdk-debuginfo","name":"java-1.7.0-openjdk-debuginfo","label":"java-1.7.0-openjdk-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/java-1.7.0-openjdk-debuginfo","purlType":"rpm","versions":[{"text":"< 1:1.7.0.151-2.6.11.0.el6_9","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.7.0.151-2.6.11.1.el7_4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.7.0.151-2.6.11.0.el6_9 | < 1:1.7.0.151-2.6.11.1.el7_4","eol":null,"hubHref":null},{"vendor":"redhat","product":"java-1.7.0-openjdk-demo","name":"java-1.7.0-openjdk-demo","label":"java-1.7.0-openjdk-demo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/java-1.7.0-openjdk-demo","purlType":"rpm","versions":[{"text":"< 1:1.7.0.151-2.6.11.0.el6_9","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.7.0.151-2.6.11.1.el7_4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.7.0.151-2.6.11.0.el6_9 | < 1:1.7.0.151-2.6.11.1.el7_4","eol":null,"hubHref":null},{"vendor":"redhat","product":"java-1.7.0-openjdk-devel","name":"java-1.7.0-openjdk-devel","label":"java-1.7.0-openjdk-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/java-1.7.0-openjdk-devel","purlType":"rpm","versions":[{"text":"< 1:1.7.0.151-2.6.11.0.el6_9","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.7.0.151-2.6.11.1.el7_4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.7.0.151-2.6.11.0.el6_9 | < 1:1.7.0.151-2.6.11.1.el7_4","eol":null,"hubHref":null},{"vendor":"redhat","product":"java-1.7.0-openjdk-headless","name":"java-1.7.0-openjdk-headless","label":"java-1.7.0-openjdk-headless","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/java-1.7.0-openjdk-headless","purlType":"rpm","versions":[{"text":"< 1:1.7.0.151-2.6.11.1.el7_4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.7.0.151-2.6.11.1.el7_4","eol":null,"hubHref":null},{"vendor":"redhat","product":"java-1.7.0-openjdk-javadoc","name":"java-1.7.0-openjdk-javadoc","label":"java-1.7.0-openjdk-javadoc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/java-1.7.0-openjdk-javadoc","purlType":"rpm","versions":[{"text":"< 1:1.7.0.151-2.6.11.0.el6_9","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.7.0.151-2.6.11.1.el7_4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.7.0.151-2.6.11.0.el6_9 | < 1:1.7.0.151-2.6.11.1.el7_4","eol":null,"hubHref":null},{"vendor":"redhat","product":"java-1.7.0-openjdk-src","name":"java-1.7.0-openjdk-src","label":"java-1.7.0-openjdk-src","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/java-1.7.0-openjdk-src","purlType":"rpm","versions":[{"text":"< 1:1.7.0.151-2.6.11.0.el6_9","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.7.0.151-2.6.11.1.el7_4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.7.0.151-2.6.11.0.el6_9 | < 1:1.7.0.151-2.6.11.1.el7_4","eol":null,"hubHref":null}],"affectedCount":8,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2017:2424","label":"access.redhat.com/errata/RHSA-2017:2424","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471266","label":"bugzilla.redhat.com/show_bug.cgi?id=1471266","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471270","label":"bugzilla.redhat.com/show_bug.cgi?id=1471270","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471517","label":"bugzilla.redhat.com/show_bug.cgi?id=1471517","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471521","label":"bugzilla.redhat.com/show_bug.cgi?id=1471521","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471523","label":"bugzilla.redhat.com/show_bug.cgi?id=1471523","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471527","label":"bugzilla.redhat.com/show_bug.cgi?id=1471527","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471528","label":"bugzilla.redhat.com/show_bug.cgi?id=1471528","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471534","label":"bugzilla.redhat.com/show_bug.cgi?id=1471534","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471535","label":"bugzilla.redhat.com/show_bug.cgi?id=1471535","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471670","label":"bugzilla.redhat.com/show_bug.cgi?id=1471670","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471711","label":"bugzilla.redhat.com/show_bug.cgi?id=1471711","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471738","label":"bugzilla.redhat.com/show_bug.cgi?id=1471738","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471851","label":"bugzilla.redhat.com/show_bug.cgi?id=1471851","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471871","label":"bugzilla.redhat.com/show_bug.cgi?id=1471871","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471888","label":"bugzilla.redhat.com/show_bug.cgi?id=1471888","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471889","label":"bugzilla.redhat.com/show_bug.cgi?id=1471889","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472345","label":"bugzilla.redhat.com/show_bug.cgi?id=1472345","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472666","label":"bugzilla.redhat.com/show_bug.cgi?id=1472666","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2424.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2424.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10053","label":"access.redhat.com/security/cve/CVE-2017-10053","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10053","label":"www.cve.org/CVERecord?id=CVE-2017-10053","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10053","label":"nvd.nist.gov/vuln/detail/CVE-2017-10053","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10067","label":"access.redhat.com/security/cve/CVE-2017-10067","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10067","label":"www.cve.org/CVERecord?id=CVE-2017-10067","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10067","label":"nvd.nist.gov/vuln/detail/CVE-2017-10067","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10074","label":"access.redhat.com/security/cve/CVE-2017-10074","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10074","label":"www.cve.org/CVERecord?id=CVE-2017-10074","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10074","label":"nvd.nist.gov/vuln/detail/CVE-2017-10074","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10081","label":"access.redhat.com/security/cve/CVE-2017-10081","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10081","label":"www.cve.org/CVERecord?id=CVE-2017-10081","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10081","label":"nvd.nist.gov/vuln/detail/CVE-2017-10081","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10087","label":"access.redhat.com/security/cve/CVE-2017-10087","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10087","label":"www.cve.org/CVERecord?id=CVE-2017-10087","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10087","label":"nvd.nist.gov/vuln/detail/CVE-2017-10087","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10089","label":"access.redhat.com/security/cve/CVE-2017-10089","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10089","label":"www.cve.org/CVERecord?id=CVE-2017-10089","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10089","label":"nvd.nist.gov/vuln/detail/CVE-2017-10089","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10090","label":"access.redhat.com/security/cve/CVE-2017-10090","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10090","label":"www.cve.org/CVERecord?id=CVE-2017-10090","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10090","label":"nvd.nist.gov/vuln/detail/CVE-2017-10090","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10096","label":"access.redhat.com/security/cve/CVE-2017-10096","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10096","label":"www.cve.org/CVERecord?id=CVE-2017-10096","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10096","label":"nvd.nist.gov/vuln/detail/CVE-2017-10096","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10101","label":"access.redhat.com/security/cve/CVE-2017-10101","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10101","label":"www.cve.org/CVERecord?id=CVE-2017-10101","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10101","label":"nvd.nist.gov/vuln/detail/CVE-2017-10101","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10102","label":"access.redhat.com/security/cve/CVE-2017-10102","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10102","label":"www.cve.org/CVERecord?id=CVE-2017-10102","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10102","label":"nvd.nist.gov/vuln/detail/CVE-2017-10102","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10107","label":"access.redhat.com/security/cve/CVE-2017-10107","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10107","label":"www.cve.org/CVERecord?id=CVE-2017-10107","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10107","label":"nvd.nist.gov/vuln/detail/CVE-2017-10107","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10108","label":"access.redhat.com/security/cve/CVE-2017-10108","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10108","label":"www.cve.org/CVERecord?id=CVE-2017-10108","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10108","label":"nvd.nist.gov/vuln/detail/CVE-2017-10108","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10109","label":"access.redhat.com/security/cve/CVE-2017-10109","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10109","label":"www.cve.org/CVERecord?id=CVE-2017-10109","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10109","label":"nvd.nist.gov/vuln/detail/CVE-2017-10109","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10110","label":"access.redhat.com/security/cve/CVE-2017-10110","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10110","label":"www.cve.org/CVERecord?id=CVE-2017-10110","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10110","label":"nvd.nist.gov/vuln/detail/CVE-2017-10110","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10115","label":"access.redhat.com/security/cve/CVE-2017-10115","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10115","label":"www.cve.org/CVERecord?id=CVE-2017-10115","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10115","label":"nvd.nist.gov/vuln/detail/CVE-2017-10115","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10116","label":"access.redhat.com/security/cve/CVE-2017-10116","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10116","label":"www.cve.org/CVERecord?id=CVE-2017-10116","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10116","label":"nvd.nist.gov/vuln/detail/CVE-2017-10116","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10135","label":"access.redhat.com/security/cve/CVE-2017-10135","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10135","label":"www.cve.org/CVERecord?id=CVE-2017-10135","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10135","label":"nvd.nist.gov/vuln/detail/CVE-2017-10135","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10243","label":"access.redhat.com/security/cve/CVE-2017-10243","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10243","label":"www.cve.org/CVERecord?id=CVE-2017-10243","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10243","label":"nvd.nist.gov/vuln/detail/CVE-2017-10243","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA","label":"www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","hostname":"www.oracle.com","tags":["ARTICLE"]}],"lineage":{"upstream":["CVE-2017-10053","CVE-2017-10067","CVE-2017-10074","CVE-2017-10081","CVE-2017-10087","CVE-2017-10089","CVE-2017-10090","CVE-2017-10096","CVE-2017-10101","CVE-2017-10102","CVE-2017-10107","CVE-2017-10108","CVE-2017-10109","CVE-2017-10110","CVE-2017-10115","CVE-2017-10116","CVE-2017-10135","CVE-2017-10243"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-09-13T14:41:54.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-29T10:17:14.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":35,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T05:35:48.624Z","stale":false,"partial":false}}