VDB
BDU%3A2022-03304
BDU%3A2022-03304
PUBLISHED
CVSS 10 CRITICAL
Уязвимость метода getMBeanInstantiator в классе JmxMBeanServer программной платформы Java Runtime Environment, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Novell Inc., Canonical Ltd., Oracle Corp. | Red Hat Enterprise Linux, Red Hat Enterprise Linux Server, Suse Linux Enterprise Desktop, Suse Linux Enterprise Server, Ubuntu, Java Runtime Environment, Red Hat Enterprise Linux Workstation |
Timeline
- Jul 13, 2019 PoC Published
- Jan 8, 2020 PoC Published
- Oct 6, 2020 PoC Published
- Nov 4, 2021 PoC Published
- Jun 6, 2022 CVE Published
- Jul 22, 2023 PoC Published
- Sep 24, 2024 CVE Updated
- Feb 13, 2025 PoC Published
- Mar 19, 2026 Distribution Patch
- Mar 28, 2026 PoC Published
- Aug 26, 2026 PoC Published
References
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog url
- http://blog.fireeye.com/research/2013/01/happy-new-year-from-new-java-zero-day.html url
- http://blog.fuseyism.com/index.php/2013/01/15/security-icedtea-2-1-4-2-2-4-2-3-4-released/ url
- http://immunityproducts.blogspot.ca/2013/01/confirmed-java-only-fixed-one-of-two.html url
- http://krebsonsecurity.com/2013/01/zero-day-java-exploit-debuts-in-crimeware/ url
- http://labs.alienvault.com/labs/index.php/2013/new-year-new-java-zeroday/ url
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00025.html url
- http://malware.dontneedcoffee.com/2013/01/0-day-17u10-spotted-in-while-disable.html url
- http://rhn.redhat.com/errata/RHSA-2013-0156.html url
- http://rhn.redhat.com/errata/RHSA-2013-0165.html url
- http://seclists.org/bugtraq/2013/Jan/48 url
- http://www.kb.cert.org/vuls/id/625617 url
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:095 url
- http://www.oracle.com/technetwork/topics/security/alert-cve-2013-0422-1896849.html url
- http://www.ubuntu.com/usn/USN-1693-1 url
- http://www.us-cert.gov/cas/techalerts/TA13-010A.html url
- https://partners.immunityinc.com/idocs/Java%20MBeanInstantiator.findClass%200day%20Analysis.pdf url
- https://threatpost.com/en_us/blogs/nasty-new-java-zero-day-found-exploit-kits-already-have-it-011013 url
- https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0018 url
- https://www-304.ibm.com/connections/blogs/PSIRT/entry/oracle_java_7_security_manager_bypass_vulnerability_cve_2013_04224?lang=en_us url
…and 3 more