WaratekVRT Sign in

Oracle Critical Patch Update October 2017

Released October 2017 · Oracle's advisory ↗ · ← Critical Patch Update, July 2017 · Critical Patch Update, January 2018 →

225 CVEs in this release, one square each

Protected by Waratek, exploitedProtected by Waratek, exploitedProtected by Waratek, exploitedProtected by Waratek, exploitedProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekMitigation candidateMitigation candidateMitigation candidateNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedOutside Waratek scope, exploitedOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicable
Share this chart Oracle Critical Patch Update October 2017, one square per CVE: 119 Java CVEs, 15 protected by Waratek, 5 exploited, 106 other CVEs in this release.

Download the image

By status

15Protected by Waratek3Mitigation candidate101No exploit published34Outside Waratek scope72Not applicable 5Exploited, marked by the ring

No exploit published. For 100 of them, Oracle's security advisory is the source of public detail.

Protected by Waratek. Waratek RASP can block exploitation of these on systems that have not applied the patch yet.

Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Published from 2016-08-01✕
Overview 202 matches · 114 in Waratek scope · 11 protected · 3 exploited · 2 CISA KEV · 8 public PoC · 6 EPSS ≥ 0.5
202matches 114in Waratek scope56.4% 11protected5.4% 3exploited1.5% 2CISA KEV1.0% 8public PoC4.0% 6EPSS ≥ 0.53.0%
Protected by Waratek 11 5.4% Rule in development 0 0.0% Mitigation candidate 3 1.5% No exploit published 100 49.5% Outside Waratek scope 27 13.4% Not applicable 61 30.2% Withdrawn CVE 0 0.0%
Critical 17 8.4% High 67 33.2% Medium 108 53.5% Low 10 5.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 11 5.4% partly blocked 0 0.0% not blocked 191 94.6% not established 0 0.0% unrecorded 0 0.0%
Exploited 3 1.5% Working exploit published 4 2.0% Proof of concept only 2 1.0% Forecast only 2 1.0% No public exploit 191 94.6%
split by peak 184 / month
Not applicable: 61Outside Waratek scope: 27No exploit published: 100Mitigation candidate: 3Protected by Waratek: 11 Low: 10Medium: 108High: 67Critical: 17 not blocked: 191blocked by ARMR today: 11 No public exploit: 191Forecast only: 2Proof of concept only: 2Working exploit published: 4Exploited: 3
Sep 163 Outside Waratek scope1 Not applicable2 High3 not blocked3 Proof of concept only1 Forecast only1 No public exploit1 Oct 161 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1 Nov 160 Dec 160 Jan 171 Not applicable1 Medium1 not blocked1 No public exploit1 Feb 171 Outside Waratek scope1 High1 not blocked1 No public exploit1 Mar 170 Apr 172 Protected by Waratek1 Not applicable1 Critical1 High1 blocked by ARMR today1 not blocked1 Exploited1 No public exploit1 May 175 Not applicable5 Critical2 High2 Medium1 not blocked5 Forecast only1 No public exploit4 Jun 172 Outside Waratek scope2 Critical1 High1 not blocked2 No public exploit2 Jul 170 Aug 170 Sep 170 Oct 17184 Protected by Waratek8 Mitigation candidate3 No exploit published100 Outside Waratek scope22 Not applicable51 Critical10 High58 Medium106 Low10 blocked by ARMR today8 not blocked176 Exploited1 Working exploit published4 Proof of concept only1 No public exploit178 Nov 172 Protected by Waratek1 Not applicable1 Critical1 High1 blocked by ARMR today1 not blocked1 Exploited1 No public exploit1 Dec 170 Jan 181 Outside Waratek scope1 Critical1 not blocked1 No public exploit1
Sep 16Nov 16Jan 17Mar 17May 17Jul 17Sep 17Nov 17Jan 18
202 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 3 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2016-6304 High 2016-09-26 Not applicable Forecast only Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.
CVE-2016-2183 High 2016-09-01 Outside Waratek scope Proof of concept only The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.
‹ prev page 3 of 3 next ›