Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2011-3571

Опубликовано: 14 фев. 2012
Источник: redhat
CVSS2: 6.8

Описание

Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session. NOTE: this CVE identifier was accidentally used for a Concurrency issue in Java Runtime Environment, but that issue has been reassigned to CVE-2012-0507.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 4java-1.6.0-sunAffected
Red Hat Enterprise Linux 5java-1.6.0-openjdkFixedRHSA-2012:032221.02.2012
Red Hat Enterprise Linux 6java-1.6.0-openjdkFixedRHSA-2012:013514.02.2012
Supplementary for Red Hat Enterprise Linux 5java-1.6.0-sunFixedRHSA-2012:013916.02.2012
Supplementary for Red Hat Enterprise Linux 6java-1.6.0-sunFixedRHSA-2012:013916.02.2012

Показывать по

Дополнительная информация

Статус:

Critical
https://bugzilla.redhat.com/show_bug.cgi?id=788994OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299)

6.8 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 14 лет назад

Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session. NOTE: this CVE identifier was accidentally used for a Concurrency issue in Java Runtime Environment, but that issue has been reassigned to CVE-2012-0507.

nvd
больше 14 лет назад

Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session. NOTE: this CVE identifier was accidentally used for a Concurrency issue in Java Runtime Environment, but that issue has been reassigned to CVE-2012-0507.

debian
больше 14 лет назад

Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) ...

github
около 4 лет назад

Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session. NOTE: this CVE identifier was accidentally used for a Concurrency issue in Java Runtime Environment, but that issue has been reassigned to CVE-2012-0507.

oracle-oval
больше 14 лет назад

ELSA-2012-0322: java-1.6.0-openjdk security update (IMPORTANT)

6.8 Medium

CVSS2

Уязвимость CVE-2011-3571