Candidate: CVE-2018-2942
PublicDate: 2018-07-18 13:29:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2942
Description:
 Vulnerability in the Java SE component of Oracle Java SE (subcomponent:
 Windows DLL). Supported versions that are affected are Java SE: 7u181 and
 8u172. Difficult to exploit vulnerability allows unauthenticated attacker
 with network access via multiple protocols to compromise Java SE.
 Successful attacks require human interaction from a person other than the
 attacker and while the vulnerability is in Java SE, attacks may
 significantly impact additional products. Successful attacks of this
 vulnerability can result in takeover of Java SE. Note: Applies to client
 and server deployment of Java. This vulnerability can be exploited through
 sandboxed Java Web Start applications and sandboxed Java applets. It can
 also be exploited by supplying data to APIs in the specified Component
 without using sandboxed Java Web Start applications or sandboxed Java
 applets, such as through a web service. CVSS 3.0 Base Score 8.3
 (Confidentiality, Integrity and Availability impacts). CVSS Vector:
 (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
Ubuntu-Description:
Notes:
 sbeattie> affects Windows DLLs, i.e. oracle java only
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H [8.3 HIGH]

Patches_openjdk-6:
upstream_openjdk-6: not-affected (oracle only)
precise/esm_openjdk-6: DNE
trusty_openjdk-6: not-affected (oracle only)
trusty/esm_openjdk-6: DNE (trusty was not-affected [oracle only])
xenial_openjdk-6: DNE
artful_openjdk-6: DNE
bionic_openjdk-6: DNE
devel_openjdk-6: DNE

Patches_openjdk-7:
upstream_openjdk-7: not-affected (oracle only)
precise/esm_openjdk-7: DNE
trusty_openjdk-7: not-affected (oracle only)
trusty/esm_openjdk-7: DNE (trusty was not-affected [oracle only])
xenial_openjdk-7: DNE
artful_openjdk-7: DNE
bionic_openjdk-7: DNE
devel_openjdk-7: DNE

Patches_openjdk-8:
upstream_openjdk-8: not-affected (oracle only)
precise/esm_openjdk-8: DNE
trusty_openjdk-8: DNE
trusty/esm_openjdk-8: DNE
xenial_openjdk-8: not-affected (oracle only)
esm-infra/xenial_openjdk-8: not-affected (oracle only)
artful_openjdk-8: ignored (reached end-of-life)
bionic_openjdk-8: not-affected (oracle only)
devel_openjdk-8: not-affected (oracle only)

Patches_icedtea-web:
upstream_icedtea-web: not-affected (oracle only)
precise/esm_icedtea-web: DNE
trusty_icedtea-web: not-affected (oracle only)
trusty/esm_icedtea-web: DNE (trusty was not-affected [oracle only])
xenial_icedtea-web: not-affected (oracle only)
artful_icedtea-web: ignored (reached end-of-life)
bionic_icedtea-web: not-affected (oracle only)
devel_icedtea-web: not-affected (oracle only)

Patches_openjdk-9:
upstream_openjdk-9: not-affected (oracle only)
precise/esm_openjdk-9: DNE
trusty_openjdk-9: DNE
trusty/esm_openjdk-9: DNE
xenial_openjdk-9: not-affected (oracle only)
artful_openjdk-9: ignored (reached end-of-life)
bionic_openjdk-9: DNE
devel_openjdk-9: DNE

Patches_openjdk-lts:
upstream_openjdk-lts: not-affected (oracle only)
precise/esm_openjdk-lts: DNE
trusty_openjdk-lts: DNE
trusty/esm_openjdk-lts: DNE
xenial_openjdk-lts: DNE
bionic_openjdk-lts: not-affected (oracle only)
devel_openjdk-lts: not-affected (oracle only)