CVE catalog
CVE-2017-10388
UBUNTU-CVE-2017-10388
- Severity
- Medium · CVSS 6.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 3.21% · Oct 25, 2026
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: Applies to the Java SE Kerberos client. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | openjdk-7 | 8 | 7u101-2.6.6-1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u101-2.6.6-1~deb8u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u101-2.6.6-2 | vulnerable |
| Debian | openjdk-7 | 8 | 7u101-2.6.6-2~deb7u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u101-2.6.6-2~deb8u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u111-2.6.7-1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u111-2.6.7-1~deb7u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u111-2.6.7-1~deb8u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u111-2.6.7-2 | vulnerable |
| Debian | openjdk-7 | 8 | 7u111-2.6.7-2~deb7u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u111-2.6.7-2~deb8u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u111-2.6.7-3 | vulnerable |
| Debian | openjdk-7 | 8 | 7u121-2.6.8-1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u121-2.6.8-1~deb7u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u121-2.6.8-2 | vulnerable |
| Debian | openjdk-7 | 8 | 7u121-2.6.8-2~deb7u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u121-2.6.8-2~deb8u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u131-2.6.9-1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u131-2.6.9-2 | vulnerable |
| Debian | openjdk-7 | 8 | 7u131-2.6.9-2~deb7u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u131-2.6.9-2~deb8u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u131-2.6.9-3 | vulnerable |
| Debian | openjdk-7 | 8 | 7u151-2.6.11-1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u151-2.6.11-1~deb8u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u151-2.6.11-2~deb7u2 | vulnerable |
| Debian | openjdk-7 | 8 | 7u151-2.6.11-2~deb7u3 | vulnerable |
| Debian | openjdk-7 | 8 | 7u75-2.5.4-2 | vulnerable |
| Debian | openjdk-7 | 8 | 7u75-2.5.4-3 | vulnerable |
| Debian | openjdk-7 | 8 | 7u79-2.5.5-1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u79-2.5.5-1~deb7u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u79-2.5.5-1~deb8u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u79-2.5.6-1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u79-2.5.6-1~deb7u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u79-2.5.6-1~deb8u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u85-2.6.1-1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u85-2.6.1-2 | vulnerable |
| Debian | openjdk-7 | 8 | 7u85-2.6.1-3 | vulnerable |
| Debian | openjdk-7 | 8 | 7u85-2.6.1-4 | vulnerable |
| Debian | openjdk-7 | 8 | 7u85-2.6.1-5 | vulnerable |
| Debian | openjdk-7 | 8 | 7u85-2.6.1-5~deb8u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u85-2.6.1-6 | vulnerable |
| Debian | openjdk-7 | 8 | 7u85-2.6.1-6+deb8u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u85-2.6.1-6~deb7u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u91-2.6.2-1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u91-2.6.3-1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u91-2.6.3-1+sparc64 | vulnerable |
| Debian | openjdk-7 | 8 | 7u91-2.6.3-1~deb7u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u91-2.6.3-1~deb8u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u91-2.6.3-2 | vulnerable |
| Debian | openjdk-7 | 8 | 7u91-2.6.3-3 | vulnerable |
| Debian | openjdk-7 | 8 | 7u95-2.6.4-1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u95-2.6.4-1~deb7u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u95-2.6.4-1~deb8u1 | vulnerable |
| Debian | openjdk-7 | 8 | 7u95-2.6.4-2 | vulnerable |
| Debian | openjdk-7 | 8 | 7u95-2.6.4-3 | vulnerable |
| Debian | openjdk-7 | 8 | 7u151-2.6.11-2~deb8u1 | fixed |
| Ubuntu | openjdk-7 | 14.04 | 7u25-2.3.12-4ubuntu3 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u25-2.3.12-4ubuntu5 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u45-2.4.3-3ubuntu1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u45-2.4.3-3ubuntu2 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u45-2.4.3-4ubuntu1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u45-2.4.3-4ubuntu2 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u51-2.4.4-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u51-2.4.5-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u51-2.4.6~pre1-1ubuntu2 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u51-2.4.6-1ubuntu3 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u51-2.4.6-1ubuntu4 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u55-2.4.7-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u65-2.5.1-4ubuntu1~0.14.04.1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u65-2.5.1-4ubuntu1~0.14.04.2 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u65-2.5.2-3~14.04 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u71-2.5.3-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u75-2.5.4-1~trusty1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u79-2.5.5-0ubuntu0.14.04.2 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u79-2.5.6-0ubuntu1.14.04.1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u85-2.6.1-5ubuntu0.14.04.1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u91-2.6.3-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u95-2.6.4-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u95-2.6.4-0ubuntu0.14.04.2 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u101-2.6.6-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u111-2.6.7-0ubuntu0.14.04.3 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u121-2.6.8-1ubuntu0.14.04.1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u121-2.6.8-1ubuntu0.14.04.3 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u131-2.6.9-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u131-2.6.9-0ubuntu0.14.04.2 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u151-2.6.11-0ubuntu1.14.04.1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u151-2.6.11-2ubuntu0.14.04.1 | fixed |
| Ubuntu | openjdk-8 | 16.04 | 8u66-b01-5 | vulnerable |
| Ubuntu | openjdk-8 | 16.04 | 8u72-b05-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | 16.04 | 8u72-b05-5 | vulnerable |
| Ubuntu | openjdk-8 | 16.04 | 8u72-b05-6 | vulnerable |
| Ubuntu | openjdk-8 | 16.04 | 8u72-b15-1 | vulnerable |
| Ubuntu | openjdk-8 | 16.04 | 8u72-b15-2ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | 16.04 | 8u72-b15-2ubuntu3 | vulnerable |
| Ubuntu | openjdk-8 | 16.04 | 8u72-b15-3ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | 16.04 | 8u77-b03-1ubuntu2 | vulnerable |
| Ubuntu | openjdk-8 | 16.04 | 8u77-b03-3ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | 16.04 | 8u77-b03-3ubuntu2 | vulnerable |
| Ubuntu | openjdk-8 | 16.04 | 8u77-b03-3ubuntu3 | vulnerable |
| Ubuntu | openjdk-8 | 16.04 | 8u91-b14-0ubuntu4~16.04.1 | vulnerable |
| Ubuntu | openjdk-8 | 16.04 | 8u91-b14-3ubuntu1~16.04.1 | vulnerable |
| Ubuntu | openjdk-8 | 16.04 | 8u111-b14-2ubuntu0.16.04.2 | vulnerable |
| Ubuntu | openjdk-8 | 16.04 | 8u121-b13-0ubuntu1.16.04.2 | vulnerable |
| Ubuntu | openjdk-8 | 16.04 | 8u131-b11-0ubuntu1.16.04.2 | vulnerable |
| Ubuntu | openjdk-8 | 16.04 | 8u131-b11-2ubuntu1.16.04.2 | vulnerable |
| Ubuntu | openjdk-8 | 16.04 | 8u131-b11-2ubuntu1.16.04.3 | vulnerable |
| Ubuntu | openjdk-8 | 16.04 | 8u151-b12-0ubuntu0.16.04.2 | fixed |
| Ubuntu | openjdk-9 | 16.04 | 9~b88-1 | vulnerable |
| Ubuntu | openjdk-9 | 16.04 | 9~b101-2ubuntu2 | vulnerable |
| Ubuntu | openjdk-9 | 16.04 | 9~b102-1 | vulnerable |
| Ubuntu | openjdk-9 | 16.04 | 9~b113-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-9 | 16.04 | 9~b114-0ubuntu1 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | openjdk-7 | deb | 8 | 7u151-2.6.11-2~deb8u1 | Not reported | DSA-4048-1 | Not reported |
| Ubuntu | openjdk-7 | deb | 14.04 | 7u151-2.6.11-2ubuntu0.14.04.1 | Not reported | UBUNTU-CVE-2017-10388 | Not reported |
| Ubuntu | openjdk-8 | deb | 16.04 | 8u151-b12-0ubuntu0.16.04.2 | Not reported | UBUNTU-CVE-2017-10388 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2017_2998.json]
- [https://osv.dev/vulnerability/DSA-4048-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2017-10388]
- [https://security.access.redhat.com/data/csaf/v2/vex/2017/cve-2017-10388.json]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]