Remote code execution in IBM AIX - CVE-2017-3511

Vulnerability identifier: #VU6669

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-3511

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The weakness exists due to unknown error related to the Java SE, Java SE Embedded, JRockit JCE component. A remote attacker can trick the victim into visiting a specially crafted webpage and execute arbitrary code with privileges of the current user.

Successful exploitation of the vulnerability may result in system compromise.

IBM AIX
Gentoo Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
SUSE Linux
Ubuntu
Opensuse
Planning Analytics Local
Red Hat Satellite
IBM MQ
IBM Cognos Controller
java-1.7.0-oracle-src (Red Hat package)
java-1.7.0-oracle-plugin (Red Hat package)
java-1.7.0-oracle-jdbc (Red Hat package)
java-1.7.0-oracle-javafx (Red Hat package)
java-1.7.0-oracle-devel (Red Hat package)
java-1.7.0-oracle (Red Hat package)
java-1.8.0-oracle-src (Red Hat package)
java-1.8.0-oracle-plugin (Red Hat package)
java-1.8.0-oracle-jdbc (Red Hat package)
java-1.8.0-oracle-javafx (Red Hat package)
java-1.8.0-oracle-devel (Red Hat package)
java-1.8.0-oracle (Red Hat package)

Install update from vendor's website.

java-1.7.0-oracle-src (Red Hat package) - addressed in versions 1.7.0.141-1jpp.1.el6, 1.7.0.141-1jpp.1.el7_3
java-1.7.0-oracle-plugin (Red Hat package) - addressed in versions 1.7.0.141-1jpp.1.el6, 1.7.0.141-1jpp.1.el7_3
java-1.7.0-oracle-jdbc (Red Hat package) - addressed in versions 1.7.0.141-1jpp.1.el6, 1.7.0.141-1jpp.1.el7_3
java-1.7.0-oracle-javafx (Red Hat package) - addressed in versions 1.7.0.141-1jpp.1.el6, 1.7.0.141-1jpp.1.el7_3
java-1.7.0-oracle-devel (Red Hat package) - addressed in versions 1.7.0.141-1jpp.1.el6, 1.7.0.141-1jpp.1.el7_3
java-1.7.0-oracle (Red Hat package) - addressed in versions 1.7.0.141-1jpp.1.el6, 1.7.0.141-1jpp.1.el7_3
java-1.8.0-oracle-src (Red Hat package) - addressed in versions 1.8.0.131-1jpp.1.el6, 1.8.0.131-1jpp.1.el7_3
java-1.8.0-oracle-plugin (Red Hat package) - addressed in versions 1.8.0.131-1jpp.1.el6, 1.8.0.131-1jpp.1.el7_3
java-1.8.0-oracle-jdbc (Red Hat package) - addressed in versions 1.8.0.131-1jpp.1.el6, 1.8.0.131-1jpp.1.el7_3
java-1.8.0-oracle-javafx (Red Hat package) - addressed in versions 1.8.0.131-1jpp.1.el6, 1.8.0.131-1jpp.1.el7_3
java-1.8.0-oracle-devel (Red Hat package) - addressed in versions 1.8.0.131-1jpp.1.el6, 1.8.0.131-1jpp.1.el7_3
java-1.8.0-oracle (Red Hat package) - addressed in versions 1.8.0.131-1jpp.1.el6, 1.8.0.131-1jpp.1.el7_3

• http://aix.software.ibm.com/aix/efixes/security/java_apr2017_advisory.asc

• SUSE Linux update for java-1_7_1-ibm
• SUSE Linux update for java-1_7_0-ibm
• SUSE Linux update for java-1_8_0-ibm
• Ubuntu update for OpenJDK 7
• SUSE Linux update for java-1_7_0-openjdk
• openSUSE update for java-1_7_0-openjdk
• Multiple vulnerabilities in IBM AIX
• Gentoo update for IcedTea
• Gentoo update for Oracle JDK/JRE
• Ubuntu update for OpenJDK 7
• Ubuntu update for OpenJDK 8
• Multiple vulnerabilities in IBM WebSphere MQ
• Multiple vulnerabilities in IBM Cognos Controller
• Multiple vulnerabilities in IBM Planning Analytics
• SUSE Linux update for java-1
• OpenSUSE Linux update for java-1
• Red Hat update for java-1.8.0-ibm
• Red Hat update for java-1.7.1-ibm
• Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7 update for java-1.8.0-oracle
• Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7 update for java-1.7.0-oracle