CVE-2017-10388

Published: Oct 19, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.6 / Impact: 5.9

Source: NVD

Description

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: Applies to the Java SE Kerberos client. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).

Affected (54)

Products: Oracle: Jdk, Jre · Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Tus, Enterprise Linux Workstation, Satellite · Netapp: Active Iq Unified Manager, Cloud Backup, E Series Santricity Management Plug Ins, E Series Santricity Os Controller, E Series Santricity Storage Manager, E Series Santricity Web Services, Element Software, Oncommand Balance, Oncommand Insight, Oncommand Performance Manager, Oncommand Shift, Oncommand Unified Manager, Oncommand Workflow Automation, Plug In For Symantec Netbackup, Snapmanager, Steelstore Cloud Integrated Storage, Storage Replication Adapter For Clustered Data Ontap, Vasa Provider For Clustered Data Ontap, Virtual Storage Console · +1 more

Show all products

2 products

7 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Tus

Enterprise Linux Workstation

Satellite

Netapp

19 products

Active Iq Unified Manager

Cloud Backup

E Series Santricity Management Plug Ins

E Series Santricity Os Controller

E Series Santricity Storage Manager

E Series Santricity Web Services

Element Software

Oncommand Balance

Oncommand Insight

Oncommand Performance Manager

Oncommand Shift

Oncommand Unified Manager

Oncommand Workflow Automation

Plug In For Symantec Netbackup

Snapmanager

Steelstore Cloud Integrated Storage

Storage Replication Adapter For Clustered Data Ontap

Vasa Provider For Clustered Data Ontap

Virtual Storage Console

Debian

1 product

Debian Linux

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdk	Version 1.6.0 update161
Oracle Jdk	Version 1.7.0 update151
Oracle Jdk	Version 1.8.0 update144
Oracle Jdk	Version 1.9.0
Oracle Jre	Version 1.6.0 update161
Oracle Jre	Version 1.7.0 update151
Oracle Jre	Version 1.8.0 update144
Oracle Jre	Version 1.9.0

Configuration B

17 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Eus	Version 7.4
Redhat Enterprise Linux Eus	Version 7.5
Redhat Enterprise Linux Eus	Version 7.6
Redhat Enterprise Linux Eus	Version 7.7
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.4
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Aus	Version 7.7
Redhat Enterprise Linux Server Tus	Version 7.4
Redhat Enterprise Linux Server Tus	Version 7.6
Redhat Enterprise Linux Server Tus	Version 7.7
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Enterprise Linux Workstation	Version 7.0
Redhat Satellite	Version 5.8

Configuration C

26 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	From 9.5
Netapp Active Iq Unified Manager	From 7.3
Netapp Cloud Backup	All versions
Netapp E Series Santricity Management Plug Ins	All versions
Netapp E Series Santricity Os Controller	From 11.0 to 11.70.1
Netapp E Series Santricity Storage Manager	All versions
Netapp E Series Santricity Web Services	All versions
Netapp Element Software	All versions
Netapp Oncommand Balance	All versions
Netapp Oncommand Insight	All versions
Netapp Oncommand Performance Manager	All versions
Netapp Oncommand Shift	All versions
Netapp Oncommand Unified Manager	Up to 7.1
Netapp Oncommand Unified Manager	Up to 7.1
Netapp Oncommand Unified Manager	All versions
Netapp Oncommand Workflow Automation	All versions
Netapp Plug In For Symantec Netbackup	All versions
Netapp Snapmanager	All versions
Netapp Snapmanager	All versions
Netapp Steelstore Cloud Integrated Storage	All versions
Netapp Storage Replication Adapter For Clustered Data Ontap	From 7.2
Netapp Storage Replication Adapter For Clustered Data Ontap	From 7.2
Netapp Vasa Provider For Clustered Data Ontap	From 7.2
Netapp Vasa Provider For Clustered Data Ontap	Version 6.0
Netapp Virtual Storage Console	From 7.2
Netapp Virtual Storage Console	Version 6.0

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

References (38)

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Source: secalert_us@oracle.com

PatchVendor Advisory

http://www.securityfocus.com/bid/101321

Source: secalert_us@oracle.com

Broken Link

http://www.securitytracker.com/id/1039596

Source: secalert_us@oracle.com

Broken Link

https://access.redhat.com/errata/RHSA-2017:2998

Source: secalert_us@oracle.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2999

Source: secalert_us@oracle.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3046

Source: secalert_us@oracle.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3047

Source: secalert_us@oracle.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3264

Source: secalert_us@oracle.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3267

Source: secalert_us@oracle.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3268

Source: secalert_us@oracle.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3392

Source: secalert_us@oracle.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3453

Source: secalert_us@oracle.com

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/201710-31

Source: secalert_us@oracle.com

Third Party Advisory

https://security.gentoo.org/glsa/201711-14

Source: secalert_us@oracle.com

Third Party Advisory

https://security.netapp.com/advisory/ntap-20171019-0001/

Source: secalert_us@oracle.com

Third Party Advisory

https://www.debian.org/security/2017/dsa-4015

Source: secalert_us@oracle.com

Third Party Advisory

https://www.debian.org/security/2017/dsa-4048

Source: secalert_us@oracle.com

Third Party Advisory

https://www.synology.com/support/security/Synology_SA_17_66_OpenJDK

Source: secalert_us@oracle.com

Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html