Question 1

What is CVE-2017-15095?

Accepted Answer

CVE-2017-15095 is a critical-severity software vulnerability (CWE-184) with a CVSS score of 9.8.

Question 2

Is CVE-2017-15095 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 8%.

Question 3

What products does CVE-2017-15095 affect?

Accepted Answer

Tracked products affected include Debian, Red Hat Enterprise Linux, Red Hat OpenShift, Oracle Database, JBoss. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2017-15095?

Accepted Answer

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

CVE-2017-15095

Summary

Affected products we track (5)

Recommendation

Additional information