Professional OVAL Repository
[Eng]
[Rus]
[Sign-In]
OVAL
Search
Categories
RedCheck
About
OVAL Definitions
OVAL Items
FSTEC Data Bank Information Security Threats
NKCKI
EOL (End Of Life)
Linux Security Advisories
Mozilla Foundation Security Advisory
IBM
VMware
Cisco
Check Point Software Technologies
Apache
Solaris
FreeBSD
Development
GitHub Enterprise
Google Chrome Security Advisories
Oracle Security Advisories
Adobe Security Advisories
OpenSSL Security Advisories
Microsoft
CVE
CWE
CPE
Latest Updates
OS ROSA
ALT Linux
Astra Linux SE 1.5
Astra Linux SE 1.6
RED OS
DSA (Debian Security Advisory) Patсh Statistics
DSA (Debian Security Advisory) Patсh Feed
DSA (Debian Security Advisory) Vulnerability Feed
DLA (Debian Security Advisory) Patсh Statistics
DLA (Debian Security Advisory) Patсh Feed
DLA (Debian Security Advisory) Vulnerability Feed
ALT Linux (Security Bulletins) Patсh Statistics
ALT Linux (Security Bulletins) Patсh Feed
ALT Linux (Security Bulletins) Vulnerability Feed
RED OS (Security Bulletins) Patсh Statistics
RED OS (Security Bulletins) Patсh Feed
RED OS (Security Bulletins) Vulnerability Feed
USN (Ubuntu Security Notice) Patсh Statistics
USN (Ubuntu Security Notice) Patсh Feed
USN (Ubuntu Security Notice) Vulnerability Feed
RHSA (RedHat Security Advisory) Patсh Statistics
RHSA (RedHat Security Advisory) Patсh Feed
RHSA (RedHat Security Advisory) Vulnerability Feed
ELSA (Oracle Linux Security Advisory) Patсh Statistics
ELSA (Oracle Linux Security Advisory) Patсh Feed
ELSA (Oracle Linux Security Advisory) Vulnerability Feed
SUSE (SUSE Security Advisories) Patсh Statistics
SUSE (SUSE Security Advisories) Patсh Feed
SUSE (SUSE Security Advisories) Vulnerability Feed
openSUSE (openSUSE Security Advisories) Patсh Statistics
openSUSE (openSUSE Security Advisories) Patсh Feed
openSUSE (openSUSE Security Advisories) Vulnerability Feed
Amazon Linux AMI (Security Bulletins) Patсh Statistics
Amazon Linux AMI (Security Bulletins) Patсh Feed
Amazon Linux AMI (Security Bulletins) Vulnerability Feed
Mageia Linux (Security Bulletins) Patсh Statistics
Mageia Linux (Security Bulletins) Patсh Feed
Mageia Linux (Security Bulletins) Vulnerability Feed
OS ROSA SX COBALT 1.0
OS ROSA DX COBALT 1.0
ROSA 7.3 (Security Advisories) Patсh Statistics
ROSA 7.3 (Security Advisories) Patсh Feed
ROSA 7.3 (Security Advisories) Vulnerability Feed
ALT Linux SPT 6.0
ALT Linux SPT 7.0
ALT 8 SP
ALT 9
RED OS Murom 7.1
RED OS Murom 7.2
IBM DB2
VMware Vulnerabilities Advisory (VMSA)
VMware vCenter Patch Advisories
VMware ESXi Patch Advisories
VMware NSX Patches
VMware NSX Vulnerabilities
VMware Photon OS 1.0 Patches
VMware Photon OS 1.0 Vulnerabilities
VMware Photon OS 2.0 Patches
VMware Photon OS 2.0 Vulnerabilities
Cisco ASA
Cisco IOS/NX-OS Advisory
Cisco NX-OS Vulnerabilities
Check Point Gaia
Apache Tomcat Advisories
Apache Tomcat Server
Apache HTTP Server
Python
Node.js
RubyGems
Qt
Microsoft Security Bulletin
Microsoft Knowledge Base Article
Microsoft SharePoint
Microsoft SharePoint Foundation 2013
Microsoft SharePoint Server 2013
Microsoft SharePoint Server 2016
About OVALdb
User manual
Pricing
Contact us
OVAL Definitions
>
OVAL Definition Details
Id
oval:ru.altx-soft.nix:def:18236
[Eng]
Version
5
Class
patch
ALTXid
26853
Language
Russian
Severity
NotAvailable
Title
Обновление USN-1907-2 -- обновление icedtea-web
Description
IcedTea Web updated to work with new OpenJDK 7.
Family
unix
Platform
Ubuntu 12.04
Ubuntu 12.10
Ubuntu 13.04
Product
icedtea-web
Reference
VENDOR: USN-1907-2
VENDOR: USN-1907-2
Id:
USN-1907-2
Reference:
http://www.ubuntu.com/usn/usn-1907-2/
CVE: CVE-2013-2457
CVE: CVE-2013-2457
Id:
CVE-2013-2457
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2457
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of "certain class checks" that allows remote attackers to bypass intended class restrictions.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:N/I:P/A:N
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
https://bugzilla.redhat.com/show_bug.cgi?id=975133 (CONFIRM)
RHSA-2013:0963 (REDHAT)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/ffef9e05564e (MISC)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1256 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
MDVSA-2013:183 (MANDRIVA)
RHSA-2013:1059 (REDHAT)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60632 (BID)
oval:org.mitre.oval:def:19696 (OVAL)
oval:org.mitre.oval:def:19638 (OVAL)
oval:org.mitre.oval:def:19276 (OVAL)
oval:org.mitre.oval:def:17256 (OVAL)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2455
CVE: CVE-2013-2455
Id:
CVE-2013-2455
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2455
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect access checks by the (1) getEnclosingClass, (2) getEnclosingMethod, and (3) getEnclosingConstructor methods.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
RHSA-2013:0963 (REDHAT)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/5d5ca338574f (MISC)
https://bugzilla.redhat.com/show_bug.cgi?id=975139 (CONFIRM)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21644197 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
SUSE-SU-2013:1305 (SUSE)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
MDVSA-2013:183 (MANDRIVA)
RHSA-2013:1059 (REDHAT)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60619 (BID)
oval:org.mitre.oval:def:19622 (OVAL)
oval:org.mitre.oval:def:19560 (OVAL)
oval:org.mitre.oval:def:19435 (OVAL)
oval:org.mitre.oval:def:17214 (OVAL)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2453
CVE: CVE-2013-2453
Id:
CVE-2013-2453
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2453
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to a missing check for "package access" by the MBeanServer Introspector.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:N/I:P/A:N
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c14aa930b032 (MISC)
https://bugzilla.redhat.com/show_bug.cgi?id=975134 (CONFIRM)
RHSA-2013:0963 (REDHAT)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1255 (SUSE)
SUSE-SU-2013:1256 (SUSE)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
RHSA-2013:1059 (REDHAT)
MDVSA-2013:183 (MANDRIVA)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60644 (BID)
oval:org.mitre.oval:def:19611 (OVAL)
oval:org.mitre.oval:def:19588 (OVAL)
oval:org.mitre.oval:def:16545 (OVAL)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2473
CVE: CVE-2013-2473
Id:
CVE-2013-2473
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2473
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
CVSSv2 Score:
10
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
https://bugzilla.redhat.com/show_bug.cgi?id=975110 (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/259d4998ce2f (MISC)
RHSA-2013:0963 (REDHAT)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1256 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
MDVSA-2013:183 (MANDRIVA)
RHSA-2013:1059 (REDHAT)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60623 (BID)
oval:org.mitre.oval:def:19652 (OVAL)
oval:org.mitre.oval:def:19600 (OVAL)
oval:org.mitre.oval:def:18888 (OVAL)
oval:org.mitre.oval:def:17189 (OVAL)
SUSE-SU-2013:1264 (SUSE)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2472
CVE: CVE-2013-2472
Id:
CVE-2013-2472
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2472
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ShortBandedRaster size checks" in 2D.
CVSSv2 Score:
10
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
RHSA-2013:0963 (REDHAT)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/3cd4bec64e31 (MISC)
https://bugzilla.redhat.com/show_bug.cgi?id=975107 (CONFIRM)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1256 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
RHSA-2013:1059 (REDHAT)
MDVSA-2013:183 (MANDRIVA)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60656 (BID)
oval:org.mitre.oval:def:19543 (OVAL)
oval:org.mitre.oval:def:18846 (OVAL)
oval:org.mitre.oval:def:18742 (OVAL)
oval:org.mitre.oval:def:16712 (OVAL)
SUSE-SU-2013:1264 (SUSE)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2471
CVE: CVE-2013-2471
Id:
CVE-2013-2471
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2471
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect IntegerComponentRaster size checks."
CVSSv2 Score:
10
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/4c3d38927a26 (MISC)
https://bugzilla.redhat.com/show_bug.cgi?id=975102 (CONFIRM)
RHSA-2013:0963 (REDHAT)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1256 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
RHSA-2013:1059 (REDHAT)
MDVSA-2013:183 (MANDRIVA)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60659 (BID)
oval:org.mitre.oval:def:19441 (OVAL)
oval:org.mitre.oval:def:19413 (OVAL)
oval:org.mitre.oval:def:19295 (OVAL)
oval:org.mitre.oval:def:16840 (OVAL)
SUSE-SU-2013:1264 (SUSE)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2470
CVE: CVE-2013-2470
Id:
CVE-2013-2470
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2470
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "ImagingLib byte lookup processing."
CVSSv2 Score:
10
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/89d9ec9e80c1 (MISC)
https://bugzilla.redhat.com/show_bug.cgi?id=975099 (CONFIRM)
RHSA-2013:0963 (REDHAT)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1256 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
MDVSA-2013:183 (MANDRIVA)
RHSA-2013:1059 (REDHAT)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60651 (BID)
oval:org.mitre.oval:def:19655 (OVAL)
oval:org.mitre.oval:def:19517 (OVAL)
oval:org.mitre.oval:def:19348 (OVAL)
oval:org.mitre.oval:def:16806 (OVAL)
SUSE-SU-2013:1264 (SUSE)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2469
CVE: CVE-2013-2469
Id:
CVE-2013-2469
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2469
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image layout verification" in 2D.
CVSSv2 Score:
10
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/64055b403176 (MISC)
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=975120 (CONFIRM)
RHSA-2013:0963 (REDHAT)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1256 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
MDVSA-2013:183 (MANDRIVA)
RHSA-2013:1059 (REDHAT)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60658 (BID)
oval:org.mitre.oval:def:19713 (OVAL)
oval:org.mitre.oval:def:19552 (OVAL)
oval:org.mitre.oval:def:19314 (OVAL)
oval:org.mitre.oval:def:17042 (OVAL)
SUSE-SU-2013:1264 (SUSE)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2465
CVE: CVE-2013-2465
Id:
CVE-2013-2465
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2465
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D.
CVSSv2 Score:
10
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
https://bugzilla.redhat.com/show_bug.cgi?id=975118 (CONFIRM)
RHSA-2013:0963 (REDHAT)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2a9c79db0040 (MISC)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1256 (SUSE)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
MDVSA-2013:183 (MANDRIVA)
RHSA-2013:1059 (REDHAT)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60657 (BID)
oval:org.mitre.oval:def:19703 (OVAL)
oval:org.mitre.oval:def:19455 (OVAL)
oval:org.mitre.oval:def:19074 (OVAL)
oval:org.mitre.oval:def:17106 (OVAL)
SUSE-SU-2013:1264 (SUSE)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2463
CVE: CVE-2013-2463
Id:
CVE-2013-2463
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2463
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image attribute verification" in 2D.
CVSSv2 Score:
10
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
https://bugzilla.redhat.com/show_bug.cgi?id=975115 (CONFIRM)
RHSA-2013:0963 (REDHAT)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b79d56eee18e (MISC)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1256 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
http://www.informationweek.com/security/vulnerabilities/hackers-target-java-6-with-security-expl/240160443 (MISC)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
MDVSA-2013:183 (MANDRIVA)
RHSA-2013:1059 (REDHAT)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60655 (BID)
oval:org.mitre.oval:def:19685 (OVAL)
oval:org.mitre.oval:def:19620 (OVAL)
oval:org.mitre.oval:def:19373 (OVAL)
oval:org.mitre.oval:def:17149 (OVAL)
SUSE-SU-2013:1264 (SUSE)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2461
CVE: CVE-2013-2461
Id:
CVE-2013-2461
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2461
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier; the Oracle JRockit component in Oracle Fusion Middleware R27.7.5 and earlier and R28.2.7 and earlier; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the June and July 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass verification of XML signatures via vectors related to a "Missing check for [a] valid DOMCanonicalizationMethod canonicalization algorithm."
CVSSv2 Score:
7.5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
https://bugzilla.redhat.com/show_bug.cgi?id=975126 (CONFIRM)
RHSA-2013:0963 (REDHAT)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/abe9ea5a50d2 (MISC)
http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html (CONFIRM)
54154 (SECUNIA)
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html (CONFIRM)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
MDVSA-2013:183 (MANDRIVA)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html (CONFIRM)
GLSA-201406-32 (GENTOO)
http://www.vmware.com/security/advisories/VMSA-2014-0012.html (CONFIRM)
20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities (FULLDISC)
60645 (BID)
oval:org.mitre.oval:def:19582 (OVAL)
oval:org.mitre.oval:def:19565 (OVAL)
oval:org.mitre.oval:def:16887 (OVAL)
RHSA-2014:0414 (REDHAT)
20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities (BUGTRAQ)
CVE: CVE-2013-2460
CVE: CVE-2013-2460
Id:
CVE-2013-2460
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2460
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "insufficient access checks" in the tracing component.
CVSSv2 Score:
9.3
Access vector:
NETWORK
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
https://bugzilla.redhat.com/show_bug.cgi?id=975122 (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/160cde99bb1a (MISC)
RHSA-2013:0963 (REDHAT)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1256 (SUSE)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
TA13-169A (CERT)
HPSBUX02907 (HP)
MDVSA-2013:183 (MANDRIVA)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
oval:org.mitre.oval:def:19129 (OVAL)
oval:org.mitre.oval:def:17116 (OVAL)
CVE: CVE-2013-2459
CVE: CVE-2013-2459
Id:
CVE-2013-2459
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2459
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "integer overflow checks."
CVSSv2 Score:
10
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
https://bugzilla.redhat.com/show_bug.cgi?id=975121 (CONFIRM)
RHSA-2013:0963 (REDHAT)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c98afec1bf86 (MISC)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1256 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
RHSA-2013:1059 (REDHAT)
MDVSA-2013:183 (MANDRIVA)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60647 (BID)
oval:org.mitre.oval:def:19741 (OVAL)
oval:org.mitre.oval:def:19587 (OVAL)
oval:org.mitre.oval:def:19310 (OVAL)
oval:org.mitre.oval:def:17181 (OVAL)
SUSE-SU-2013:1264 (SUSE)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2451
CVE: CVE-2013-2451
Id:
CVE-2013-2451
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2451
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper enforcement of exclusive port binds when running on Windows, which allows attackers to bind to ports that are already in use.
CVSSv2 Score:
3.7
Access vector:
LOCAL
Access complexity:
HIGH
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:L/AC:H/Au:N/C:P/I:P/A:P
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=975146 (CONFIRM)
RHSA-2013:0963 (REDHAT)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/8dd8266a2f4b (MISC)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
RHSA-2013:1059 (REDHAT)
GLSA-201406-32 (GENTOO)
60625 (BID)
oval:org.mitre.oval:def:19535 (OVAL)
oval:org.mitre.oval:def:17265 (OVAL)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2448
CVE: CVE-2013-2448
Id:
CVE-2013-2448
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2448
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to insufficient "access restrictions" and "robustness of sound classes."
CVSSv2 Score:
7.6
Access vector:
NETWORK
Access complexity:
HIGH
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:H/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/91ce9432f88d (MISC)
https://bugzilla.redhat.com/show_bug.cgi?id=975125 (CONFIRM)
RHSA-2013:0963 (REDHAT)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1256 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
MDVSA-2013:183 (MANDRIVA)
RHSA-2013:1059 (REDHAT)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60640 (BID)
oval:org.mitre.oval:def:19692 (OVAL)
oval:org.mitre.oval:def:19669 (OVAL)
oval:org.mitre.oval:def:19632 (OVAL)
oval:org.mitre.oval:def:17052 (OVAL)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2450
CVE: CVE-2013-2450
Id:
CVE-2013-2450
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2450
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
https://bugzilla.redhat.com/show_bug.cgi?id=975141 (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/285765be3123 (MISC)
RHSA-2013:0963 (REDHAT)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
MDVSA-2013:183 (MANDRIVA)
RHSA-2013:1059 (REDHAT)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60638 (BID)
oval:org.mitre.oval:def:19645 (OVAL)
oval:org.mitre.oval:def:19562 (OVAL)
oval:org.mitre.oval:def:19290 (OVAL)
oval:org.mitre.oval:def:17176 (OVAL)
SUSE-SU-2013:1264 (SUSE)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2445
CVE: CVE-2013-2445
Id:
CVE-2013-2445
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2445
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Hotspot. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "handling of memory allocation errors."
CVSSv2 Score:
7.8
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:C
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
RHSA-2013:0963 (REDHAT)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/hotspot/rev/ed3ac73a70ab (MISC)
https://bugzilla.redhat.com/show_bug.cgi?id=975124 (CONFIRM)
54154 (SECUNIA)
SSRT101305 (HP)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
MDVSA-2013:183 (MANDRIVA)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60639 (BID)
oval:org.mitre.oval:def:19516 (OVAL)
oval:org.mitre.oval:def:19190 (OVAL)
oval:org.mitre.oval:def:19059 (OVAL)
oval:org.mitre.oval:def:17090 (OVAL)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2444
CVE: CVE-2013-2444
Id:
CVE-2013-2444
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2444
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not "properly manage and restrict certain resources related to the processing of fonts," possibly involving temporary files.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/09c14ca57ff0 (MISC)
https://bugzilla.redhat.com/show_bug.cgi?id=975131 (CONFIRM)
RHSA-2013:0963 (REDHAT)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
MDVSA-2013:183 (MANDRIVA)
RHSA-2013:1059 (REDHAT)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60633 (BID)
oval:org.mitre.oval:def:19602 (OVAL)
oval:org.mitre.oval:def:19476 (OVAL)
oval:org.mitre.oval:def:19307 (OVAL)
oval:org.mitre.oval:def:16851 (OVAL)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2456
CVE: CVE-2013-2456
Id:
CVE-2013-2456
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2456
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/141facdacbf0 (MISC)
https://bugzilla.redhat.com/show_bug.cgi?id=975142 (CONFIRM)
RHSA-2013:0963 (REDHAT)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1256 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
MDVSA-2013:183 (MANDRIVA)
RHSA-2013:1059 (REDHAT)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60641 (BID)
oval:org.mitre.oval:def:19676 (OVAL)
oval:org.mitre.oval:def:19643 (OVAL)
oval:org.mitre.oval:def:19267 (OVAL)
oval:org.mitre.oval:def:17294 (OVAL)
SUSE-SU-2013:1264 (SUSE)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2452
CVE: CVE-2013-2452
Id:
CVE-2013-2452
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2452
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "network address handling in virtual machine identifiers" and the lack of "unique and unpredictable IDs" in the java.rmi.dgc.VMID class.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/25ebac17c3cb (MISC)
RHSA-2013:0963 (REDHAT)
https://bugzilla.redhat.com/show_bug.cgi?id=975138 (CONFIRM)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
RHSA-2013:1059 (REDHAT)
MDVSA-2013:183 (MANDRIVA)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60617 (BID)
oval:org.mitre.oval:def:19665 (OVAL)
oval:org.mitre.oval:def:19231 (OVAL)
oval:org.mitre.oval:def:19213 (OVAL)
oval:org.mitre.oval:def:16580 (OVAL)
SUSE-SU-2013:1264 (SUSE)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2449
CVE: CVE-2013-2449
Id:
CVE-2013-2449
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2449
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to GnomeFileTypeDetector and a missing check for read permissions for a path.
CVSSv2 Score:
4.3
Access vector:
NETWORK
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:M/Au:N/C:P/I:N/A:N
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
https://bugzilla.redhat.com/show_bug.cgi?id=975145 (CONFIRM)
RHSA-2013:0963 (REDHAT)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b1a2b9ac9714 (MISC)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
TA13-169A (CERT)
HPSBUX02907 (HP)
MDVSA-2013:183 (MANDRIVA)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
oval:org.mitre.oval:def:18717 (OVAL)
oval:org.mitre.oval:def:17192 (OVAL)
CVE: CVE-2013-2447
CVE: CVE-2013-2447
Id:
CVE-2013-2447
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2447
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket's local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/cc656d61e713 (MISC)
RHSA-2013:0963 (REDHAT)
https://bugzilla.redhat.com/show_bug.cgi?id=975140 (CONFIRM)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
MDVSA-2013:183 (MANDRIVA)
RHSA-2013:1059 (REDHAT)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60629 (BID)
oval:org.mitre.oval:def:19324 (OVAL)
oval:org.mitre.oval:def:19252 (OVAL)
oval:org.mitre.oval:def:18699 (OVAL)
oval:org.mitre.oval:def:16770 (OVAL)
SUSE-SU-2013:1264 (SUSE)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2446
CVE: CVE-2013-2446
Id:
CVE-2013-2446
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2446
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
https://bugzilla.redhat.com/show_bug.cgi?id=975132 (CONFIRM)
RHSA-2013:0963 (REDHAT)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/corba/rev/161ec4dd450d (MISC)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
RHSA-2013:1059 (REDHAT)
MDVSA-2013:183 (MANDRIVA)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60620 (BID)
oval:org.mitre.oval:def:19658 (OVAL)
oval:org.mitre.oval:def:19225 (OVAL)
oval:org.mitre.oval:def:19062 (OVAL)
oval:org.mitre.oval:def:16311 (OVAL)
SUSE-SU-2013:1264 (SUSE)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2443
CVE: CVE-2013-2443
Id:
CVE-2013-2443
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2443
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2452 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect "checking order" within the AccessControlContext class.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/f6dce3552285 (MISC)
https://bugzilla.redhat.com/show_bug.cgi?id=975137 (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/0344da726f70 (MISC)
RHSA-2013:0963 (REDHAT)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21644197 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02907 (HP)
RHSA-2013:1059 (REDHAT)
MDVSA-2013:183 (MANDRIVA)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60646 (BID)
oval:org.mitre.oval:def:19299 (OVAL)
oval:org.mitre.oval:def:17230 (OVAL)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2412
CVE: CVE-2013-2412
Id:
CVE-2013-2412
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2412
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient indication of an SSL connection failure by JConsole, related to RMI connection dialog box.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
RHSA-2013:0963 (REDHAT)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/3927a18bbcbf (MISC)
https://bugzilla.redhat.com/show_bug.cgi?id=975144 (CONFIRM)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
RHSA-2013:1059 (REDHAT)
MDVSA-2013:183 (MANDRIVA)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60618 (BID)
oval:org.mitre.oval:def:19633 (OVAL)
oval:org.mitre.oval:def:19375 (OVAL)
oval:org.mitre.oval:def:17098 (OVAL)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-2407
CVE: CVE-2013-2407
Id:
CVE-2013-2407
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2407
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availability via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "XML security and the class loader."
CVSSv2 Score:
6.4
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:P
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c82ed89b21bc (MISC)
RHSA-2013:0963 (REDHAT)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/0e80792291c0 (MISC)
https://bugzilla.redhat.com/show_bug.cgi?id=975127 (CONFIRM)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1255 (SUSE)
SUSE-SU-2013:1256 (SUSE)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
RHSA-2013:1059 (REDHAT)
MDVSA-2013:183 (MANDRIVA)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60653 (BID)
oval:org.mitre.oval:def:19568 (OVAL)
oval:org.mitre.oval:def:18622 (OVAL)
oval:org.mitre.oval:def:17195 (OVAL)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-1571
CVE: CVE-2013-1571
Id:
CVE-2013-1571
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1571
Comment
: Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
CVSSv2 Score:
4.3
Access vector:
NETWORK
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
https://bugzilla.redhat.com/show_bug.cgi?id=973474 (CONFIRM)
RHSA-2013:0963 (REDHAT)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/langtools/rev/17ee569d0c01 (MISC)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21644197 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
VU#225657 (CERT-VN)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
MDVSA-2013:183 (MANDRIVA)
RHSA-2013:1059 (REDHAT)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60634 (BID)
oval:org.mitre.oval:def:19718 (OVAL)
oval:org.mitre.oval:def:19667 (OVAL)
oval:org.mitre.oval:def:19518 (OVAL)
oval:org.mitre.oval:def:17215 (OVAL)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ ()
[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ ()
[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/ ()
[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/ ()
[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/ ()
[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/ ()
[openoffice-commits] 20200305 svn commit: r1874832 - in /openoffice/ooo-site/trunk/content: download/checksums.html download/globalvars.js download/test/globalvars.js security/cves/CVE-2012-0037.html security/cves/CVE-2013-1571.html ()
CVE: CVE-2013-2458
CVE: CVE-2013-2458
Id:
CVE-2013-2458
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2458
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via "an error related to method handles."
CVSSv2 Score:
5.8
Access vector:
NETWORK
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:N
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/9efb5fb77027 (MISC)
https://bugzilla.redhat.com/show_bug.cgi?id=975130 (CONFIRM)
RHSA-2013:0963 (REDHAT)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1256 (SUSE)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
TA13-169A (CERT)
HPSBUX02907 (HP)
MDVSA-2013:183 (MANDRIVA)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
oval:org.mitre.oval:def:19709 (OVAL)
oval:org.mitre.oval:def:17069 (OVAL)
CVE: CVE-2013-2454
CVE: CVE-2013-2454
Id:
CVE-2013-2454
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2454
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox.
CVSSv2 Score:
5.8
Access vector:
NETWORK
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:N
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
https://bugzilla.redhat.com/show_bug.cgi?id=975129 (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/ec931d812faa (MISC)
RHSA-2013:0963 (REDHAT)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1305 (SUSE)
SUSE-SU-2013:1256 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
HPSBUX02907 (HP)
RHSA-2013:1059 (REDHAT)
MDVSA-2013:183 (MANDRIVA)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60650 (BID)
oval:org.mitre.oval:def:19470 (OVAL)
oval:org.mitre.oval:def:19407 (OVAL)
oval:org.mitre.oval:def:19237 (OVAL)
oval:org.mitre.oval:def:17236 (OVAL)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-1500
CVE: CVE-2013-1500
Id:
CVE-2013-1500
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1500
Comment
: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory.
CVSSv2 Score:
3.6
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:P/I:P/A:N
References:
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html (CONFIRM)
https://twitter.com/timb_machine/status/347110990124568577 (MISC)
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/1111f9acb96b (MISC)
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=975148 (CONFIRM)
RHSA-2013:0963 (REDHAT)
54154 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21644197 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21642336 (CONFIRM)
SUSE-SU-2013:1293 (SUSE)
SUSE-SU-2013:1255 (SUSE)
RHSA-2013:1081 (REDHAT)
SUSE-SU-2013:1305 (SUSE)
RHSA-2013:1060 (REDHAT)
SUSE-SU-2013:1257 (SUSE)
SSRT101305 (HP)
RHSA-2013:1455 (REDHAT)
RHSA-2013:1456 (REDHAT)
TA13-169A (CERT)
HPSBUX02908 (HP)
MDVSA-2013:183 (MANDRIVA)
RHSA-2013:1059 (REDHAT)
http://advisories.mageia.org/MGASA-2013-0185.html (CONFIRM)
GLSA-201406-32 (GENTOO)
60627 (BID)
oval:org.mitre.oval:def:19726 (OVAL)
oval:org.mitre.oval:def:19663 (OVAL)
oval:org.mitre.oval:def:17221 (OVAL)
SUSE-SU-2013:1264 (SUSE)
SUSE-SU-2013:1263 (SUSE)
RHSA-2014:0414 (REDHAT)
Content available only for registered users!
ovaldb@altx-soft.com