UBUNTU-CVE-2018-2972

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2018-2972

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-2972.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2018-2972

Upstream

CVE-2018-2972

Downstream

USN-3747-1

Related

USN-3747-1

Published

2018-07-18T00:00:00Z

Modified

2025-09-08T16:44:39Z

Severity

5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). The supported version that is affected is Java SE: 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).

References

Affected packages

Ubuntu:18.04:LTS / openjdk-lts

Package

Name: openjdk-lts
Purl: pkg:deb/ubuntu/openjdk-lts@10.0.2+13-1ubuntu0.18.04.1?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

10.0.2+13-1ubuntu0.18.04.1

Affected versions

9.*

9.0.4+12-2ubuntu4

9.0.4+12-4ubuntu1

Other

10~46-4ubuntu1

10~46-5ubuntu1

10.*

10.0.1+10-1ubuntu2

10.0.1+10-3ubuntu1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "10.0.2+13-1ubuntu0.18.04.1",
            "binary_name": "openjdk-11-demo"
        },
        {
            "binary_version": "10.0.2+13-1ubuntu0.18.04.1",
            "binary_name": "openjdk-11-jdk"
        },
        {
            "binary_version": "10.0.2+13-1ubuntu0.18.04.1",
            "binary_name": "openjdk-11-jdk-headless"
        },
        {
            "binary_version": "10.0.2+13-1ubuntu0.18.04.1",
            "binary_name": "openjdk-11-jre"
        },
        {
            "binary_version": "10.0.2+13-1ubuntu0.18.04.1",
            "binary_name": "openjdk-11-jre-headless"
        },
        {
            "binary_version": "10.0.2+13-1ubuntu0.18.04.1",
            "binary_name": "openjdk-11-jre-zero"
        },
        {
            "binary_version": "10.0.2+13-1ubuntu0.18.04.1",
            "binary_name": "openjdk-11-source"
        }
    ]
}