Which products and versions are affected by CVE-2011-3556?

Affected: Jrockit (Oracle) versions r28.0.0, r28.0.1, r28.0.2, r28.1.0, r28.1.1, r28.1.3; Jdk (Sun) versions 1.4.2, 1.4.2_1, 1.4.2_10, 1.4.2_11, 1.4.2_12, 1.4.2_13, 1.4.2_14, 1.4.2_15; Jre (Sun) versions 1.4.2, 1.4.2_1, 1.4.2_10, 1.4.2_11, 1.4.2_12, 1.4.2_13, 1.4.2_14, 1.4.2_15, among others. The full list is in the CVE brief.

Is CVE-2011-3556 being exploited in the wild?

It is not listed in any known-exploited vulnerabilities catalog.

Is CVE-2011-3556 in the CISA KEV catalog?

No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.

Is there a public exploit for CVE-2011-3556?

Public exploit code is available.

Is there a fix for CVE-2011-3556?

Fixed versions are available, including java 1.4.2-ibm-0:1.4.2.13.11-1jpp.1.el4, java 1.5.0-ibm-1:1.5.0.13.0-1jpp.1.el5, java 1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1.

How urgently should CVE-2011-3556 be patched?

Brandefense priority: patch immediately, because it is very likely to be exploited soon.

Request A Demo

Vulnerability Intelligence

CVE-2011-3556

HighPublic exploit

OpenJDK: RMI DGC server remote code execution (RMI, 7077466)

Published Oct 18, 2011 · Updated Mar 9, 2026

Key Facts

Patch immediately

CVE-2011-3556 is a high-severity vulnerability (CVSS 7.5 v2) affecting Jrockit (Oracle), Jdk (Sun), Jre (Sun) and 13 more products.
It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
EPSS estimates a 76% probability of exploitation in the next 30 days.
Fixed versions are available, including java 1.4.2-ibm-0:1.4.2.13.11-1jpp.1.el4, java 1.5.0-ibm-1:1.5.0.13.0-1jpp.1.el5, java 1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.

CVSS v2

7.5

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS (30-day exploit likelihood)

76%

Higher than 99.5% of all scored CVEs

Exploited in the wild

No known

Not in a known-exploited catalog

Public exploit code

Available

Proof-of-concept or weaponized module

Get the full CVE-2011-3556 brief as a PDF

Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.

Description

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3557.

Affected Products

217 affected entries in total

Product	Affected versions	Fixed in
JrockitOracle	r28.0.0, r28.0.1, r28.0.2, r28.1.0, r28.1.1, r28.1.3	r28.1.4
JdkSun	1.4.2, 1.4.2_1, 1.4.2_10, 1.4.2_11, 1.4.2_12, 1.4.2_13, 1.4.2_14, 1.4.2_15	1.4.2_33
JreSun	1.4.2, 1.4.2_1, 1.4.2_10, 1.4.2_11, 1.4.2_12, 1.4.2_13, 1.4.2_14, 1.4.2_15	1.4.2_33
openjdk-11-openj9chainguard	See advisory	0.53.0-r0
openjdk-17-openj9chainguard	See advisory	0.53.0-r0

11 more affected products in the full CVE brief

Patched Releases

java

1.4.2-ibm-0:1.4.2.13.11-1jpp.1.el4, 1.5.0-ibm-1:1.5.0.13.0-1jpp.1.el5, 1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1

java-1.6.0-openjdk