Skip to content
OpenAdvisories
Unscored RHSA-2008:1018 21 CVEs

Red Hat Security Advisory: java-1.6.0-sun security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-sun 1:1.6.0.11-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-sun-demo 1:1.6.0.11-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-sun-devel 1:1.6.0.11-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-sun-jdbc 1:1.6.0.11-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-sun-plugin 1:1.6.0.11-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-sun-src 1:1.6.0.11-1jpp.1.el4
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-sun 1:1.6.0.11-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-sun-demo 1:1.6.0.11-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-sun-devel 1:1.6.0.11-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-sun-jdbc 1:1.6.0.11-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-sun-plugin 1:1.6.0.11-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-sun-src 1:1.6.0.11-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-sun 1:1.6.0.11-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-sun-demo 1:1.6.0.11-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-sun-devel 1:1.6.0.11-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-sun-jdbc 1:1.6.0.11-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-sun-plugin 1:1.6.0.11-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-sun-src 1:1.6.0.11-1jpp.1.el5

Vulnerabilities 21

  • Unscored —
    CVE-2008-2086

    Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and…

  • Unscored —
    CVE-2008-5339

    Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK an…

  • Unscored —
    CVE-2008-5340

    Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK an…

  • Unscored —
    CVE-2008-5341

    Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JD…

  • Unscored —
    CVE-2008-5342

    Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 1…

  • Unscored —
    CVE-2008-5343

    Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earli…

  • Unscored —
    CVE-2008-5344

    Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK an…

  • Unscored —
    CVE-2008-5345

    Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5…

  • Unscored —
    CVE-2008-5347

    Multiple unspecified vulnerabilities in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier allo…

  • Unscored —
    CVE-2008-5348

    Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.…

  • Unscored —
    CVE-2008-5349

    Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JR…

  • Unscored —
    CVE-2008-5350

    Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.…

  • Unscored —
    CVE-2008-5351

    Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and …

  • Unscored —
    CVE-2008-5352

    Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environmen…

  • Unscored —
    CVE-2008-5353 Public exploit EPSS 86%

    The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; …

  • Unscored —
    CVE-2008-5354

    Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE …

  • Unscored —
    CVE-2008-5356

    Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5…

  • Unscored —
    CVE-2008-5357 EPSS 10%

    Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update …

  • Unscored —
    CVE-2008-5358

    Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbi…

  • Unscored —
    CVE-2008-5359 EPSS 11%

    Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 1…

  • Unscored —
    CVE-2008-5360

    Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK …

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://blogs.sun.com/security/entry/advance_notification_of_security_updates3
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474556
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_1018.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-2086
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2086
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2086
  • report
    https://access.redhat.com/security/cve/CVE-2008-5339
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474772
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5339
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5339
  • report
    https://access.redhat.com/security/cve/CVE-2008-5340
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474773
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5340
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5340
  • report
    https://access.redhat.com/security/cve/CVE-2008-5341
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474786
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5341
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5341
  • report
    https://access.redhat.com/security/cve/CVE-2008-5342
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474789
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5342
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5342
  • report
    https://access.redhat.com/security/cve/CVE-2008-5343
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474790
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5343
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5343
  • report
    https://access.redhat.com/security/cve/CVE-2008-5344
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474792
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5344
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5344
  • report
    https://access.redhat.com/security/cve/CVE-2008-5345
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474793
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5345
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5345
  • report
    https://access.redhat.com/security/cve/CVE-2008-5347
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=472208
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5347
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5347