Assistant: 
User: System: You are a security expert. Please provide step-by-step remediation instructions (maximum 900 chars length) for the given vulnerability. Your response must be in English.
User: Generate remediation plan for following CVE:
- Your remediation plan should be specifically for the given CVE and contains installation instruction.
- Be sure to refer to the version mentioned in the solution and corresponds to the version of the operating system.
- Do not mention the operating system in the remediation plan.

'''Vulnerability Name: Oracle Java SE Multiple Vulnerabilities (October 2018 CPU)

CVE: CVE-2018-3136
CVE-2018-3139
CVE-2018-3149
CVE-2018-3150
CVE-2018-3157
CVE-2018-3169
CVE-2018-3180
CVE-2018-3183
CVE-2018-3209
CVE-2018-3211
CVE-2018-3214
CVE-2018-13785

Nessus vulnerability description: The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is prior to 11 Update 1, 8 Update 191, 7 Update 201, or 6 Update 211. It is, therefore, affected by multiple vulnerabilities related to the following components :

  - An unspecified vulnerability in the Java SE, Java SE     Embedded component of Oracle Java SE in the Deployment     (libpng) subcomponent could allow an unauthenticated,     remote attacker with network access via HTTP to     compromise Java SE, Java SE Embedded. (CVE-2018-13785)

  - An unspecified vulnerability in the Java SE, Java SE     Embedded component of Oracle Java SE in the Hotspot     subcomponent could allow an unauthenticated, remote     attacker with network access via multiple protocols to     compromise Java SE, Java SE Embedded. (CVE-2018-3169)

  - An unspecified vulnerability in the Java SE component     of Oracle Java SE in the JavaFX subcomponent could allow     an unauthenticated, remote attacker with network access     via multiple protocols to compromise Java SE.
    (CVE-2018-3209)

  - An unspecified vulnerability in the Java SE, Java SE     Embedded, JRockit component of Oracle Java SE in the     JNDI subcomponent could allow an unauthenticated, remote     attacker with network access via multiple protocols to     compromise Java SE, Java SE Embedded, JRockit.
    (CVE-2018-3149)  
  - An unspecified vulnerability in the Java SE, Java SE     Embedded, JRockit component of Oracle Java SE in the     JSSE subcomponent could allow an unauthenticated,     remote attacker with network access via SSL/TLS to     compromise Java SE, Java SE Embedded, JRockit.
    (CVE-2018-3180)

  - An unspecified vulnerability in the Java SE, Java SE     Embedded component of Oracle Java SE in the     Networking subcomponent could allow an unauthenticated,     remote attacker with network access via multiple     protocols to compromise Java SE, Java SE Embedded.
    (CVE-2018-3139)

  - An unspecified vulnerability in the Java SE, Java SE     Embedded, JRockit component of Oracle Java SE in the     Scripting subcomponent could allow an unauthenticated,     remote attacker with network access via multiple     protocols to compromise Java SE, Java SE Embedded,     JRockit. (CVE-2018-3183)

  - An unspecified vulnerability in the Java SE, Java SE     Embedded component of Oracle Java SE in the Security     subcomponent could allow an unauthenticated, remote     attacker with network access via multiple protocols to     compromise Java SE, Java SE Embedded. (CVE-2018-3136)

  - An unspecified vulnerability in the Java SE, Java SE     Embedded component of Oracle Java SE in the     Serviceability subcomponent could allow a low privileged     attacker with logon to the infrastructure where Java SE,     Java SE Embedded executes to compromise Java SE, Java SE     Embedded. (CVE-2018-3211)

  - An unspecified vulnerability in the Java SE component of     Oracle Java SE in the Sound subcomponent could allow an     unauthenticated, remote attacker with network access via     multiple protocols to compromise Java SE.
    (CVE-2018-3157)

  - An unspecified vulnerability in the Java SE component of     Oracle Java SE in the Utility subcomponent could allow     an unauthenticated, remote attacker with network access     via multiple protocols to compromise Java SE.
    (CVE-2018-3150)

Please consult the CVRF details for the applicable CVEs for additional information.

Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.


The following vulnerable instance of Java is installed on the
remote host :

  Path              : C:\Program Files\Java\jre1.8.0_171
  Installed version : 1.8.0_171.11
  Fixed version     : 1.6.0_211 / 1.7.0_201 / 1.8.0_191 / 1.11.0_1


Reference: n/a

Nessus solution: Upgrade to Oracle JDK / JRE 11 Update 1, 8 Update 191 / 7 Update 201 / 6 Update 211 or later. If necessary, remove any affected versions.

Note that an Extended Support contract with Oracle is needed to obtain JDK / JRE 6 Update 95 or later.

Operating systemes: Microsoft Windows Server 2019 Standard Build 17763'''
Assistant:
Assistant: