Security restrictions bypass in Oracle Java SE and Java SE Embedded - CVE-2018-2790

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU11947

Security restrictions bypass in Oracle Java SE and Java SE Embedded - CVE-2018-2790

Published: April 19, 2018


Vulnerability identifier: #VU11947
CSH Severity: Low
CVSS v4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-2790
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote unauthenticated attacker to write arbitrary files on the target system.

The weakness exists in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE due to improper security restrictions. A remote attacker can trick the victim into opening a specially crafted file and update, insert or delete some of Java SE, Java SE Embedded accessible data.

Affected software

Oracle Java SE
Java SE Embedded
Amazon Linux AMI
Gentoo Linux
Debian Linux
IBM AIX
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Power
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux EUS Compute Node
Ubuntu
IBM Algo Credit Manager
Red Hat Satellite

IBM Cognos Business Intelligence Server
Cognos Insight
openSUSE Leap
openjdk-7-jre-zero (Ubuntu package)
openjdk-7-jre-lib (Ubuntu package)
openjdk-7-jre (Ubuntu package)
icedtea-7-jre-jamvm (Ubuntu package)
openjdk-7-jre-headless (Ubuntu package)
openjdk-8-jre-jamvm (Ubuntu package)
openjdk-8-jre-zero (Ubuntu package)
openjdk-8-jre-headless (Ubuntu package)
openjdk-8-jre (Ubuntu package)
IBM Tivoli Netcool Configuration Manager
Virtualization Engine TS7700 3957-VEB
Virtualization Engine TS7700 3957-V07
Virtualization Engine TS7700 3957-VEC

How to mitigate CVE-2018-2790

Install update from vendor's website.

openjdk-7-jre-zero (Ubuntu package) - update to 7u181-2.6.14-0ubuntu0.1
openjdk-7-jre-lib (Ubuntu package) - update to 7u181-2.6.14-0ubuntu0.1
openjdk-7-jre (Ubuntu package) - update to 7u181-2.6.14-0ubuntu0.1
icedtea-7-jre-jamvm (Ubuntu package) - update to 7u181-2.6.14-0ubuntu0.1
openjdk-7-jre-headless (Ubuntu package) - update to 7u181-2.6.14-0ubuntu0.1
openjdk-8-jre-jamvm (Ubuntu package) - update to 8u171-b11-0ubuntu0.16.04.1
openjdk-8-jre-zero (Ubuntu package) - addressed in versions 8u171-b11-0ubuntu0.16.04.1, 8u171-b11-0ubuntu0.17.10.1
openjdk-8-jre-headless (Ubuntu package) - addressed in versions 8u171-b11-0ubuntu0.16.04.1, 8u171-b11-0ubuntu0.17.10.1
openjdk-8-jre (Ubuntu package) - addressed in versions 8u171-b11-0ubuntu0.16.04.1, 8u171-b11-0ubuntu0.17.10.1
IBM Tivoli Netcool Configuration Manager - addressed in versions 6.4.1.4.0.8, 6.4.2.6.0.1
Virtualization Engine TS7700 3957-VEB - addressed in versions 8.33.3.14 VTD_EXEC.269, 8.40.2.12 VTD_EXEC.269, 8.41.101.10 VTD_EXEC.269, 8.41.200.113 VTD_EXEC.269
Virtualization Engine TS7700 3957-V07 - addressed in versions 8.33.3.14 VTD_EXEC.269, 8.40.2.12 VTD_EXEC.269, 8.41.101.10 VTD_EXEC.269, 8.41.200.113 VTD_EXEC.269
Virtualization Engine TS7700 3957-VEC - addressed in versions 8.40.2.12 VTD_EXEC.269, 8.41.101.10 VTD_EXEC.269, 8.41.200.113 VTD_EXEC.269

External References

Related Security Bulletins