CVE-2014-3577

20

FAUCET Score

CVE-2014-3577 is a hostname verification vulnerability affecting Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2. It allows man-in-the-middle attackers to spoof SSL servers by crafting X.509 certificates with a "CN=" string in a distinguished name field, bypassing proper hostname matching. Rated with a CVSS score of 5.8, this medium-severity flaw requires medium attack complexity and could lead to partial confidentiality and integrity compromise. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 4.0, <= 4.3.4CPE matchmatch criteria	cpe:2.3:a:apache:httpclient::::::::
		>= 4.0, <= 4.0.1CPE matchmatch criteria	cpe:2.3:a:apache:httpasyncclient::::::::

CVSS Data

CVSS version used by this source: 2.0

5.8MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:N

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Exploitability Score

8.6

Impact Score

4.9

CvssVersion

2.0

Exploit Intelligence

EPSS Score

9.15%

Probability of exploitation in next 30 days

EPSS Percentile

94.8%

Percentile rank of EPSS score among Peer Group

As of 2026-07-24

Model: v2026.06.15

This CVE's current EPSS score of 0.0915 is in the 94th percentile among its peer group of 19,954 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (118)

mavenpatch availablevia ghsa

Product: org.apache.httpcomponents:httpclientFixed in: 4.3.5

redhatpatch availablevia redhat_api

Product: JBEWP 5 for RHEL 5Fixed in: jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5

redhatpatch availablevia redhat_api

Product: JBEWP 5 for RHEL 5Fixed in: jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5

redhatpatch availablevia redhat_api

Product: JBEWP 5 for RHEL 5Fixed in: apache-cxf-0:2.2.12-14.patch_09.ep5.el5

redhatpatch availablevia redhat_api

Product: JBEWP 5 for RHEL 6Fixed in: jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5

redhatpatch availablevia redhat_api

Product: JBEWP 5 for RHEL 6Fixed in: jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6

redhatpatch availablevia redhat_api

Product: JBEWP 5 for RHEL 6Fixed in: apache-cxf-0:2.2.12-14.patch_09.el6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: jakarta-commons-httpclient-1:3.1-0.9.el6_5

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: httpcomponents-client-0:4.2.5-5.el7_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: jakarta-commons-httpclient-1:3.1-16.el7_0

redhatpatch availablevia redhat_api

Product: Red Hat JBoss A-MQ 6.2

redhatpatch availablevia redhat_api

Product: Red Hat JBoss BPMS 6.0Fixed in: httpclient

redhatpatch availablevia redhat_api

Product: Red Hat JBoss BPMS 6.0Fixed in: cxf

redhatpatch availablevia redhat_api

Product: Red Hat JBoss BRMS 6.0Fixed in: httpclient

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5Fixed in: wss4j-0:1.6.16-2.redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss BPMS 6.0Fixed in: jakarta-commons-httpclient

redhatpatch availablevia redhat_api

Product: Red Hat JBoss BRMS 6.0Fixed in: jakarta-commons-httpclient

redhatpatch availablevia redhat_api

Product: Red Hat JBoss BRMS 6.0Fixed in: cxf

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Data Virtualization 6.0Fixed in: httpclient

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Data Virtualization 6.1

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 5.2Fixed in: httpclient

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 5.2Fixed in: jakarta-commons-httpclient

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 5.2

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 5 for RHEL 4Fixed in: jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el4

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 5 for RHEL 4Fixed in: jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el4

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 5 for RHEL 4Fixed in: apache-cxf-0:2.2.12-14.patch_09.ep5.el4

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 5 for RHEL 5Fixed in: jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 5 for RHEL 5Fixed in: apache-cxf-0:2.2.12-14.patch_09.ep5.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 5 for RHEL 6Fixed in: jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 5 for RHEL 6Fixed in: jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 5 for RHEL 6Fixed in: apache-cxf-0:2.2.12-14.patch_09.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6.3

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5Fixed in: httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5Fixed in: apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6Fixed in: httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6Fixed in: apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6Fixed in: wss4j-0:1.6.16-2.redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7Fixed in: httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7Fixed in: apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7Fixed in: wss4j-0:1.6.16-2.redhat_3.1.ep6.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Fuse 6.2

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Fuse Service Works 6.0Fixed in: httpclient

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Operations Network 3.3Fixed in: httpclient

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Operations Network 3.3Fixed in: jakarta-commons-httpclient

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Portal 6.2Fixed in: httpclient

redhatpatch availablevia redhat_api

Product: Red Hat JBoss SOA Platform 5.3Fixed in: cxf

redhatpatch availablevia redhat_api

Product: Red Hat JBoss SOA Platform 5.3Fixed in: httpclient

redhatpatch availablevia redhat_api

Product: Red Hat JBoss SOA Platform 5.3Fixed in: jakarta-commons-httpclient

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Framework Kit 2.7Fixed in: httpclient

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Platform 5.2Fixed in: httpclient

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Platform 5.2Fixed in: jakarta-commons-httpclient

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Platform 5.2

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.10Fixed in: jenkins-0:2.319.2.1643288987-1.el8

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: activemq-0:5.9.0-6.redhat.611463.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: ImageMagick-0:6.7.2.7-5.el6_8

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: jenkins-0:1.651.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: libcgroup-0:0.40.rc1-18.el6_8

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-broker-0:1.16.3.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-broker-util-0:1.37.6.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-cron-0:1.25.4.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-diy-0:1.26.2.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-haproxy-0:1.31.6.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-jbosseap-0:2.27.4.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-jbossews-0:1.35.5.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-jenkins-0:1.29.2.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-jenkins-client-0:1.26.1.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-mongodb-0:1.26.2.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-mysql-0:1.31.3.3-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-nodejs-0:1.33.1.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-perl-0:1.30.2.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-php-0:1.35.4.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-python-0:1.34.3.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-ruby-0:1.32.2.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-msg-node-mcollective-0:1.30.2.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-node-proxy-0:1.26.3.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-node-util-0:1.38.7.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: rhc-0:1.38.7.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: rubygem-openshift-origin-admin-console-0:1.28.2.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: rubygem-openshift-origin-controller-0:1.38.6.4-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: rubygem-openshift-origin-frontend-haproxy-sni-proxy-0:0.5.2.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: rubygem-openshift-origin-msg-broker-mcollective-0:1.36.2.4-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: rubygem-openshift-origin-node-0:1.38.6.4-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: rubygem-openshift-origin-routing-daemon-0:0.26.6.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections 1 for Red Hat Enterprise Linux 6Fixed in: thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.4 EUSFixed in: thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1

redhatpatch availablevia redhat_api

Product: RHEV Manager version 3.5Fixed in: org.ovirt.engine-root-0:3.5.0-29

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 5 for RHEL 5Fixed in: jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5

redhatvendor investigatingvia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6Fixed in: jakarta-commons-httpclient

redhatvendor investigatingvia redhat_api

Product: Red Hat JBoss Data Virtualization 6Fixed in: modeshape-client

redhatno patchvia redhat_api

Product: Red Hat OpenShift Enterprise 2Fixed in: httpclient

redhatno patchvia redhat_api

Product: Red Hat JBoss Data Grid 6Fixed in: cxf

redhatno patchvia redhat_api

Product: Red Hat Satellite 6Fixed in: httpcomponents-client

redhatno patchvia redhat_api

Product: Red Hat Software CollectionsFixed in: maven30-httpcomponents-client

redhatno patchvia redhat_api

Product: Red Hat Software CollectionsFixed in: maven30-jakarta-commons-httpclient

redhatno patchvia redhat_api

Product: Red Hat JBoss Data Grid 6Fixed in: httpclient

redhatno patchvia redhat_api

Product: Red Hat JBoss Data Virtualization 6Fixed in: cxf

redhatno patchvia redhat_api

Product: Red Hat Virtualization 4Fixed in: ovirt-engine-sdk-java

redhatno patchvia redhat_api

Product: Red Hat Enterprise Virtualization 3Fixed in: redhat-support-plugin-rhev

redhatno patchvia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 5Fixed in: cxf

redhatno patchvia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6Fixed in: cxf

redhatno patchvia redhat_api

Product: Red Hat Enterprise Virtualization 3Fixed in: rhevm-dependencies

redhatno patchvia redhat_api

Product: Red Hat JBoss Fuse Service Works 6Fixed in: cxf

redhatno patchvia redhat_api

Product: Red Hat JBoss Operations Network 3Fixed in: cxf

redhatno patchvia redhat_api

Product: Red Hat JBoss Portal 5Fixed in: httpclient

redhatno patchvia redhat_api

Product: Red Hat JBoss Portal 6Fixed in: cxf

redhatno patchvia redhat_api

Product: Red Hat JBoss Portal 5Fixed in: jakarta-commons-httpclient

redhatno patchvia redhat_api

Product: Red Hat JBoss BRMS 5Fixed in: cxf

redhatend of lifevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1Fixed in: jakarta-commons-httpclient

redhatend of lifevia redhat_api

Product: Red Hat JBoss BRMS 5Fixed in: httpclient

redhatend of lifevia redhat_api

Product: Red Hat JBoss BRMS 5Fixed in: jakarta-commons-httpclient

redhatend of lifevia redhat_api

Product: Red Hat JBoss BRMS 5Fixed in: modeshape-client

redhatend of lifevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 4Fixed in: jakarta-commons-httpclient

redhatend of lifevia redhat_api

Product: OpenShift Enterprise 1Fixed in: jakarta-commons-httpclient

redhatend of lifevia redhat_api

Product: Red Hat JBoss SOA Platform 4Fixed in: jakarta-commons-httpclient

redhatend of lifevia redhat_api

Product: Red Hat Satellite 5Fixed in: jakarta-commons-httpclient

redhatend of lifevia redhat_api

Product: Red Hat Storage 2Fixed in: rhevm-dependencies

redhatend of lifevia redhat_api

Product: Red Hat Storage 3Fixed in: rhevm-dependencies

Vendor Advisories (2)

mavenGHSA-cfh5-3ghh-wfjxmedium

Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient

redhatCVE-2014-3577Important

CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix

References

lists.opensuse.org / opensuse-security-announce/2020-11/msg00032.html

lists.opensuse.org / opensuse-security-announce/2020-11/msg00033.html

packetstormsecurity.com / files/127913/Apache-HttpComponents-Man-In-The-Middle.html

ExploitThird Party AdvisoryVDB Entry

rhn.redhat.com / errata/RHSA-2014-1146.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2014-1166.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2014-1833.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2014-1834.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2014-1835.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2014-1836.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2014-1891.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2014-1892.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2015-0125.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2015-0158.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2015-0675.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2015-0720.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2015-0765.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2015-0850.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2015-0851.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2015-1176.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2015-1177.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2015-1888.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2016-1773.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2016-1931.html

Third Party Advisory

access.redhat.com / solutions/1165533

Third Party Advisory

seclists.org / fulldisclosure/2014/Aug/48

ExploitMailing ListThird Party Advisory

secunia.com / advisories/60466

Third Party Advisory

secunia.com / advisories/60589

Third Party Advisory

secunia.com / advisories/60713

Third Party Advisory

exchange.xforce.ibmcloud.com / vulnerabilities/95327

Third Party AdvisoryVDB Entry

h20566.www2.hpe.com / portal/site/hpsc/public/kb/docDisplay

Third Party Advisory

h20566.www2.hpe.com / portal/site/hpsc/public/kb/docDisplay

Third Party Advisory

lists.apache.org / thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E

lists.apache.org / thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E

lists.apache.org / thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E

lists.apache.org / thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E

lists.apache.org / thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E

lists.apache.org / thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E

lists.apache.org / thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E

lists.apache.org / thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E

lists.apache.org / thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E

security.netapp.com / advisory/ntap-20231027-0003

openwall.com / lists/oss-security/2021/10/06/1

oracle.com / technetwork/security-advisory/cpujul2018-4258247.html

osvdb.org / 110143

Broken Link

securityfocus.com / bid/69258

Third Party AdvisoryVDB Entry

securitytracker.com / id/1030812

Third Party AdvisoryVDB Entry

ubuntu.com / usn/USN-2769-1

Third Party Advisory