The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1745:04 advisory.

    The OpenJDK runtime environment.
    Security issues fixed with this release:
    CVE-2017-10053
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10067
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10074
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10078
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10081
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10087
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10089
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10090
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10096
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10101
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10102
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10107
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10108
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10109
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10110
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10111
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10115
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10116
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10135
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10193
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-10198
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for java-1_7_0-openjdk fixes the following issues:
Security issues fixed :

  - CVE-2017-10356: Fix issue inside subcomponent Security     (bsc#1064084).

  - CVE-2017-10274: Fix issue inside subcomponent Smart Card     IO (bsc#1064071).

  - CVE-2017-10281: Fix issue inside subcomponent     Serialization (bsc#1064072).

  - CVE-2017-10285: Fix issue inside subcomponent RMI     (bsc#1064073).

  - CVE-2017-10295: Fix issue inside subcomponent Networking     (bsc#1064075).

  - CVE-2017-10388: Fix issue inside subcomponent Libraries     (bsc#1064086).

  - CVE-2017-10346: Fix issue inside subcomponent Hotspot     (bsc#1064078).

  - CVE-2017-10350: Fix issue inside subcomponent JAX-WS     (bsc#1064082).

  - CVE-2017-10347: Fix issue inside subcomponent     Serialization (bsc#1064079).

  - CVE-2017-10349: Fix issue inside subcomponent JAXP     (bsc#1064081).

  - CVE-2017-10345: Fix issue inside subcomponent     Serialization (bsc#1064077).

  - CVE-2017-10348: Fix issue inside subcomponent Libraries     (bsc#1064080).

  - CVE-2017-10357: Fix issue inside subcomponent     Serialization (bsc#1064085).

  - CVE-2017-10355: Fix issue inside subcomponent Networking     (bsc#1064083).

  - CVE-2017-10102: Fix incorrect handling of references in     DGC (bsc#1049316).

  - CVE-2017-10053: Fix reading of unprocessed image data in     JPEGImageReader (bsc#1049305).

  - CVE-2017-10067: Fix JAR verifier incorrect handling of     missing digest (bsc#1049306).

  - CVE-2017-10081: Fix incorrect bracket processing in     function signature handling (bsc#1049309).

  - CVE-2017-10087: Fix insufficient access control checks     in ThreadPoolExecutor (bsc#1049311).

  - CVE-2017-10089: Fix insufficient access control checks     in ServiceRegistry (bsc#1049312).

  - CVE-2017-10090: Fix insufficient access control checks     in AsynchronousChannelGroupImpl (bsc#1049313).

  - CVE-2017-10096: Fix insufficient access control checks     in XML transformations (bsc#1049314).

  - CVE-2017-10101: Fix unrestricted access to     com.sun.org.apache.xml.internal.resolver (bsc#1049315).

  - CVE-2017-10107: Fix insufficient access control checks     in ActivationID (bsc#1049318).

  - CVE-2017-10074: Fix integer overflows in range check     loop predicates (bsc#1049307).

  - CVE-2017-10110: Fix insufficient access control checks     in ImageWatched (bsc#1049321).

  - CVE-2017-10108: Fix unbounded memory allocation in     BasicAttribute deserialization (bsc#1049319).

  - CVE-2017-10109: Fix unbounded memory allocation in     CodeSource deserialization (bsc#1049320).

  - CVE-2017-10115: Fix unspecified vulnerability in     subcomponent JCE (bsc#1049324).

  - CVE-2017-10118: Fix ECDSA implementation timing attack     (bsc#1049326).

  - CVE-2017-10116: Fix LDAPCertStore following referrals to     non-LDAP URL (bsc#1049325).

  - CVE-2017-10135: Fix PKCS#8 implementation timing attack     (bsc#1049328).

  - CVE-2017-10176: Fix incorrect handling of certain EC     points (bsc#1049329).

  - CVE-2017-10074: Fix integer overflows in range check     loop predicates (bsc#1049307).

  - CVE-2017-10074: Fix integer overflows in range check     loop predicates (bsc#1049307).

  - CVE-2017-10111: Fix checks in LambdaFormEditor     (bsc#1049322).

  - CVE-2017-10243: Fix unspecified vulnerability in     subcomponent JAX-WS (bsc#1049332).

  - CVE-2017-10125: Fix unspecified vulnerability in     subcomponent deployment (bsc#1049327).

  - CVE-2017-10114: Fix unspecified vulnerability in     subcomponent JavaFX (bsc#1049323).

  - CVE-2017-10105: Fix unspecified vulnerability in     subcomponent deployment (bsc#1049317).

  - CVE-2017-10086: Fix unspecified in subcomponent JavaFX     (bsc#1049310).

  - CVE-2017-10198: Fix incorrect enforcement of certificate     path restrictions (bsc#1049331).

  - CVE-2017-10193: Fix incorrect key size constraint check     (bsc#1049330). Bug fixes :

  - Drop Exec Shield workaround to fix crashes on recent     kernels, where Exec Shield is gone (bsc#1052318).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
290075	MiracleLinux 7 : java-1.8.0-openjdk-1.8.0.141-1.b16.el7 (AXSA:2017-1745:04)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	critical
105538	SUSE SLED12 / SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2018:0005-1)	Nessus	SuSE Local Security Checks	2018/1/4	2025/11/10	critical

偵測

搜尋 Plugin

critical

critical