CVE-2012-1721

Upstream information

CVE-2012-1721 at MITRE

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1722.

---

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v2 Scores

	National Vulnerability Database
Base Score	10
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
Access Vector	Network
Access Complexity	Low
Authentication	None
Confidentiality Impact	Complete
Integrity Impact	Complete
Availability Impact	Complete

SUSE Bugzilla entries: 778629 [RESOLVED / FIXED], 780897 [RESOLVED / FIXED]

SUSE Security Advisories:

• SUSE-SU-2012:1231-1, published Tue, 25 Sep 2012 00:09:19 +0200 (CEST)
• SUSE-SU-2012:1265-1, published Fri, 28 Sep 2012 15:08:47 +0200 (CEST)

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Linux Enterprise Module for Legacy Software 12	java-1_6_0-ibm >= 1.6.0_sr16.1-5.9 java-1_6_0-ibm-fonts >= 1.6.0_sr16.1-5.9 java-1_6_0-ibm-jdbc >= 1.6.0_sr16.1-5.9 java-1_6_0-ibm-plugin >= 1.6.0_sr16.1-5.9	Patchnames: SUSE Linux Enterprise Module for Legacy Software 12 GA java-1_6_0-ibm
SUSE Linux Enterprise Server 11 SP2	java-1_6_0-ibm >= 1.6.0_sr11.0-0.3.1 java-1_6_0-ibm-alsa >= 1.6.0_sr15.0-0.5.1 java-1_6_0-ibm-devel >= 1.6.0_sr16.0-0.3.1 java-1_6_0-ibm-fonts >= 1.6.0_sr11.0-0.3.1 java-1_6_0-ibm-jdbc >= 1.6.0_sr11.0-0.3.1 java-1_6_0-ibm-plugin >= 1.6.0_sr11.0-0.3.1 java-1_7_0-ibm >= 1.7.0_sr2.0-0.5.1 java-1_7_0-ibm-alsa >= 1.7.0_sr6.0-0.7.1 java-1_7_0-ibm-devel >= 1.7.0_sr7.0-0.5.1 java-1_7_0-ibm-jdbc >= 1.7.0_sr2.0-0.5.1 java-1_7_0-ibm-plugin >= 1.7.0_sr2.0-0.5.1	Patchnames: slessp2-java-1_6_0-ibm slessp2-java-1_7_0-ibm
SUSE Linux Enterprise Server 11 SP3	java-1_6_0-ibm >= 1.6.0_sr13.1-0.9.1 java-1_6_0-ibm-alsa >= 1.6.0_sr13.1-0.9.1 java-1_6_0-ibm-fonts >= 1.6.0_sr13.1-0.9.1 java-1_6_0-ibm-jdbc >= 1.6.0_sr13.1-0.9.1 java-1_6_0-ibm-plugin >= 1.6.0_sr13.1-0.9.1 java-1_7_0-ibm >= 1.7.0_sr4.1-0.5.1 java-1_7_0-ibm-alsa >= 1.7.0_sr4.1-0.5.1 java-1_7_0-ibm-jdbc >= 1.7.0_sr4.1-0.5.1 java-1_7_0-ibm-plugin >= 1.7.0_sr4.1-0.5.1	Patchnames: SUSE Linux Enterprise Server 11 SP3 GA java-1_6_0-ibm SUSE Linux Enterprise Server 11 SP3 GA java-1_7_0-ibm
SUSE Linux Enterprise Server for VMWare 11 SP2	java-1_6_0-ibm >= 1.6.0_sr11.0-0.3.1 java-1_6_0-ibm-alsa >= 1.6.0_sr15.0-0.5.1 java-1_6_0-ibm-devel >= 1.6.0_sr16.0-0.3.1 java-1_6_0-ibm-fonts >= 1.6.0_sr11.0-0.3.1 java-1_6_0-ibm-jdbc >= 1.6.0_sr11.0-0.3.1 java-1_6_0-ibm-plugin >= 1.6.0_sr11.0-0.3.1 java-1_7_0-ibm >= 1.7.0_sr2.0-0.5.1 java-1_7_0-ibm-alsa >= 1.7.0_sr6.0-0.7.1 java-1_7_0-ibm-devel >= 1.7.0_sr7.0-0.5.1 java-1_7_0-ibm-jdbc >= 1.7.0_sr2.0-0.5.1 java-1_7_0-ibm-plugin >= 1.7.0_sr2.0-0.5.1	Patchnames: slessp2-java-1_6_0-ibm slessp2-java-1_7_0-ibm
SUSE Linux Enterprise Software Development Kit 11 SP2	java-1_6_0-ibm >= 1.6.0_sr11.0-0.3.1 java-1_6_0-ibm-devel >= 1.6.0_sr11.0-0.3.1 java-1_6_0-ibm-fonts >= 1.6.0_sr11.0-0.3.1 java-1_7_0-ibm-devel >= 1.7.0_sr2.0-0.5.1	Patchnames: sdksp2-java-1_6_0-ibm sdksp2-java-1_7_0-ibm
SUSE Linux Enterprise Software Development Kit 11 SP2	java-1_6_0-ibm >= 1.6.0_sr11.0-0.3.1 java-1_6_0-ibm-devel >= 1.6.0_sr11.0-0.3.1 java-1_6_0-ibm-fonts >= 1.6.0_sr11.0-0.3.1	sles11-sp2.ppc sles11-sp2-vmware.x86 sles11-sp2.x86 sle11-sp2-sdk.x86 sle11-sp2-sdk.ppc sles11-sp2.s390x sles11-sp2-vmware.x86-64 sle11-sp2-sdk.x86-64 sle11-sp2-sdk.s390x sles11-sp2.x86-64 SAT Patch Nr: 6793
SUSE Linux Enterprise Software Development Kit 11 SP2	java-1_6_0-ibm-devel >= 1.6.0_sr11.0-0.3.1	sles11-sp2.ppc sles11-sp2-vmware.x86 sles11-sp2.x86 sle11-sp2-sdk.x86 sle11-sp2-sdk.ppc sles11-sp2.s390x sles11-sp2-vmware.x86-64 sle11-sp2-sdk.x86-64 sle11-sp2-sdk.s390x sles11-sp2.x86-64 SAT Patch Nr: 6793
SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware	java-1_6_0-ibm >= 1.6.0_sr11.0-0.3.1 java-1_6_0-ibm-alsa >= 1.6.0_sr11.0-0.3.1 java-1_6_0-ibm-fonts >= 1.6.0_sr11.0-0.3.1 java-1_6_0-ibm-jdbc >= 1.6.0_sr11.0-0.3.1 java-1_6_0-ibm-plugin >= 1.6.0_sr11.0-0.3.1	sles11-sp2.ppc sles11-sp2-vmware.x86 sles11-sp2.x86 sle11-sp2-sdk.x86 sle11-sp2-sdk.ppc sles11-sp2.s390x sles11-sp2-vmware.x86-64 sle11-sp2-sdk.x86-64 sle11-sp2-sdk.s390x sles11-sp2.x86-64 SAT Patch Nr: 6793
SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware	java-1_6_0-ibm >= 1.6.0_sr11.0-0.3.1 java-1_6_0-ibm-fonts >= 1.6.0_sr11.0-0.3.1 java-1_6_0-ibm-jdbc >= 1.6.0_sr11.0-0.3.1 java-1_6_0-ibm-plugin >= 1.6.0_sr11.0-0.3.1	sles11-sp2.ppc sles11-sp2-vmware.x86 sles11-sp2.x86 sle11-sp2-sdk.x86 sle11-sp2-sdk.ppc sles11-sp2.s390x sles11-sp2-vmware.x86-64 sle11-sp2-sdk.x86-64 sle11-sp2-sdk.s390x sles11-sp2.x86-64 SAT Patch Nr: 6793
SUSE Linux Enterprise Server 11 SP2	java-1_6_0-ibm >= 1.6.0_sr11.0-0.3.1 java-1_6_0-ibm-fonts >= 1.6.0_sr11.0-0.3.1 java-1_6_0-ibm-jdbc >= 1.6.0_sr11.0-0.3.1	sles11-sp2.ppc sles11-sp2-vmware.x86 sles11-sp2.x86 sle11-sp2-sdk.x86 sle11-sp2-sdk.ppc sles11-sp2.s390x sles11-sp2-vmware.x86-64 sle11-sp2-sdk.x86-64 sle11-sp2-sdk.s390x sles11-sp2.x86-64 SAT Patch Nr: 6793
SUSE Linux Enterprise Server 10 SP4 for x86	java-1_6_0-ibm >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-alsa >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-devel >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-fonts >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-jdbc >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-plugin >= 1.6.0_sr11.0-0.12.1	sles10-sp4.ppc sles10-sp4.x86-64 sles10-sp4.s390x sles10-sp4.x86 ZYPP Patch Nr: 8284
SUSE Linux Enterprise Server 10 SP4 for IBM POWER	java-1_6_0-ibm >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-64bit >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-devel >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-fonts >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-jdbc >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-plugin >= 1.6.0_sr11.0-0.12.1	sles10-sp4.ppc sles10-sp4.x86-64 sles10-sp4.s390x sles10-sp4.x86 ZYPP Patch Nr: 8284
SUSE Linux Enterprise Server 10 SP4 for IBM zSeries 64bit	java-1_6_0-ibm >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-32bit >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-devel >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-devel-32bit >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-fonts >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-jdbc >= 1.6.0_sr11.0-0.12.1	sles10-sp4.ppc sles10-sp4.x86-64 sles10-sp4.s390x sles10-sp4.x86 ZYPP Patch Nr: 8284
SUSE Linux Enterprise Server 10 SP4 for AMD64 and Intel EM64T	java-1_6_0-ibm >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-32bit >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-alsa-32bit >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-devel >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-devel-32bit >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-fonts >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-jdbc >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-plugin >= 1.6.0_sr11.0-0.12.1 java-1_6_0-ibm-plugin-32bit >= 1.6.0_sr11.0-0.12.1	sles10-sp4.ppc sles10-sp4.x86-64 sles10-sp4.s390x sles10-sp4.x86 ZYPP Patch Nr: 8284
SUSE Linux Enterprise Software Development Kit 11 SP2	java-1_7_0-ibm-devel >= 1.7.0_sr2.0-0.5.1	sles11-sp2.x86 sles11-sp2.x86-64 sles11-sp2-vmware.x86-64 sle11-sp2-sdk.x86-64 sles11-sp2.ppc sle11-sp2-sdk.x86 sles11-sp2.s390x sles11-sp2-vmware.x86 sle11-sp2-sdk.ppc sle11-sp2-sdk.s390x SAT Patch Nr: 6839
SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware	java-1_7_0-ibm >= 1.7.0_sr2.0-0.5.1 java-1_7_0-ibm-alsa >= 1.7.0_sr2.0-0.5.1 java-1_7_0-ibm-jdbc >= 1.7.0_sr2.0-0.5.1 java-1_7_0-ibm-plugin >= 1.7.0_sr2.0-0.5.1	sles11-sp2.x86 sles11-sp2.x86-64 sles11-sp2-vmware.x86-64 sle11-sp2-sdk.x86-64 sles11-sp2.ppc sle11-sp2-sdk.x86 sles11-sp2.s390x sles11-sp2-vmware.x86 sle11-sp2-sdk.ppc sle11-sp2-sdk.s390x SAT Patch Nr: 6839
SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware	java-1_7_0-ibm >= 1.7.0_sr2.0-0.5.1 java-1_7_0-ibm-jdbc >= 1.7.0_sr2.0-0.5.1 java-1_7_0-ibm-plugin >= 1.7.0_sr2.0-0.5.1	sles11-sp2.x86 sles11-sp2.x86-64 sles11-sp2-vmware.x86-64 sle11-sp2-sdk.x86-64 sles11-sp2.ppc sle11-sp2-sdk.x86 sles11-sp2.s390x sles11-sp2-vmware.x86 sle11-sp2-sdk.ppc sle11-sp2-sdk.s390x SAT Patch Nr: 6839
SUSE Linux Enterprise Server 11 SP2	java-1_7_0-ibm >= 1.7.0_sr2.0-0.5.1 java-1_7_0-ibm-jdbc >= 1.7.0_sr2.0-0.5.1	sles11-sp2.x86 sles11-sp2.x86-64 sles11-sp2-vmware.x86-64 sle11-sp2-sdk.x86-64 sles11-sp2.ppc sle11-sp2-sdk.x86 sles11-sp2.s390x sles11-sp2-vmware.x86 sle11-sp2-sdk.ppc sle11-sp2-sdk.s390x SAT Patch Nr: 6839

---

Status of this issue by product and package

Product(s)	Source package	State
SUSE Linux Enterprise SDK 11 SP1	java-1_4_2-ibm	Released
SUSE Linux Enterprise SDK 11 SP2	java-1_4_2-ibm	Released
SUSE Linux Enterprise Server 10 SP3	java-1_4_2-ibm	Released
SUSE Linux Enterprise Server 10 SP4	java-1_4_2-ibm	Released
SUSE Linux Enterprise Server 10 SP4 LTSS	java-1_4_2-ibm	Released
SUSE Linux Enterprise Server 11 SP1	java-1_4_2-ibm	Released
SUSE Linux Enterprise Server 11 SP1 LTSS	java-1_4_2-ibm	Released
SUSE Linux Enterprise Server 11 SP2	java-1_4_2-ibm	Released
SUSE Linux Enterprise Server 11 SP2 LTSS	java-1_4_2-ibm	Released
SUSE Linux Enterprise Server for SAP AIO 11 SP1	java-1_4_2-ibm	Released