Professional OVAL Repository
[Eng]
[Rus]
[Sign-In]
OVAL
Search
Categories
RedCheck
About
OVAL Definitions
OVAL Items
FSTEC Data Bank Information Security Threats
NKCKI
EOL (End Of Life)
Linux Security Advisories
Mozilla Foundation Security Advisory
IBM
VMware
Cisco
Check Point Software Technologies
Apache
Solaris
FreeBSD
Development
GitHub Enterprise
Google Chrome Security Advisories
Oracle Security Advisories
Adobe Security Advisories
OpenSSL Security Advisories
Microsoft
CVE
CWE
CPE
Latest Updates
OS ROSA
ALT Linux
Astra Linux
RED OS
DSA (Debian Security Advisory) Patсh Statistics
DSA (Debian Security Advisory) Patсh Feed
DSA (Debian Security Advisory) Vulnerability Feed
DLA (Debian Security Advisory) Patсh Statistics
DLA (Debian Security Advisory) Patсh Feed
DLA (Debian Security Advisory) Vulnerability Feed
ALT Linux (Security Bulletins) Patсh Statistics
ALT Linux (Security Bulletins) Patсh Feed
ALT Linux (Security Bulletins) Vulnerability Feed
RED OS (Security Bulletins) Patсh Statistics
RED OS (Security Bulletins) Patсh Feed
RED OS (Security Bulletins) Vulnerability Feed
USN (Ubuntu Security Notice) Patсh Statistics
USN (Ubuntu Security Notice) Patсh Feed
USN (Ubuntu Security Notice) Vulnerability Feed
RHSA (RedHat Security Advisory) Patсh Statistics
RHSA (RedHat Security Advisory) Patсh Feed
RHSA (RedHat Security Advisory) Vulnerability Feed
ELSA (Oracle Linux Security Advisory) Patсh Statistics
ELSA (Oracle Linux Security Advisory) Patсh Feed
ELSA (Oracle Linux Security Advisory) Vulnerability Feed
SUSE (SUSE Security Advisories) Patсh Statistics
SUSE (SUSE Security Advisories) Patсh Feed
SUSE (SUSE Security Advisories) Vulnerability Feed
openSUSE (openSUSE Security Advisories) Patсh Statistics
openSUSE (openSUSE Security Advisories) Patсh Feed
openSUSE (openSUSE Security Advisories) Vulnerability Feed
Amazon Linux AMI (Security Bulletins) Patсh Statistics
Amazon Linux AMI (Security Bulletins) Patсh Feed
Amazon Linux AMI (Security Bulletins) Vulnerability Feed
Mageia Linux (Security Bulletins) Patсh Statistics
Mageia Linux (Security Bulletins) Patсh Feed
Mageia Linux (Security Bulletins) Vulnerability Feed
OS ROSA SX COBALT 1.0
OS ROSA DX COBALT 1.0
ROSA 7.3 (Security Advisories) Patсh Statistics
ROSA 7.3 (Security Advisories) Patсh Feed
ROSA 7.3 (Security Advisories) Vulnerability Feed
ALT Linux SPT 6.0
ALT Linux SPT 7.0
ALT 8 SP
ALT 9
Astra Linux SE 1.5
Astra Linux SE 1.6
Astra Linux SE 1.7
Astra Linux SE 1.8
RED OS Murom 7.1
RED OS Murom 7.2
IBM DB2
VMware Vulnerabilities Advisory (VMSA)
VMware vCenter Patch Advisories
VMware ESXi Patch Advisories
VMware NSX Patches
VMware NSX Vulnerabilities
VMware Photon OS 1.0 Patches
VMware Photon OS 1.0 Vulnerabilities
VMware Photon OS 2.0 Patches
VMware Photon OS 2.0 Vulnerabilities
Cisco ASA
Cisco IOS/NX-OS Advisory
Cisco NX-OS Vulnerabilities
Check Point Gaia
Apache Tomcat Advisories
Apache Tomcat Server
Apache HTTP Server
Python
Node.js
RubyGems
Qt
Microsoft Security Bulletin
Microsoft Knowledge Base Article
Microsoft SharePoint
Microsoft SharePoint Foundation 2013
Microsoft SharePoint Server 2013
Microsoft SharePoint Server 2016
About OVALdb
User manual
Pricing
Contact us
OVAL Definitions
>
OVAL Definition Details
Id
oval:ru.altx-soft.nix:def:7381
[Eng]
Version
9
Class
patch
ALTXid
65842
Language
Russian
Severity
Critical
Title
Обновление RHSA-2014:0705 : устранение уязвимостей в java-1.7.1-ibm
Description
This update fixes several vulnerabilities in the IBM Java Runtime
Environment and the IBM Java Software Development Kit. Detailed
vulnerability descriptions are linked from the IBM Security alerts
page, listed in the References section.
Family
unix
Platform
Red Hat Enterprise Linux 7
Product
java-1.7.1-ibm
Reference
VENDOR: RHSA-2014:0705
VENDOR: RHSA-2014:0705
Id:
RHSA-2014:0705
Reference:
https://rhn.redhat.com/errata/RHSA-2014-0705.html
CVE: CVE-2013-5878
CVE: CVE-2013-5878
Id:
CVE-2013-5878
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5878
Comment
: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the Security component does not properly handle null XML namespace (xmlns) attributes during XML document canonicalization, which allows attackers to escape the sandbox.
CVSSv2 Score:
7.5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
https://bugzilla.redhat.com/show_bug.cgi?id=1051823 (CONFIRM)
1029608 (SECTRACK)
64927 (BID)
102005 (OSVDB)
56432 (SECUNIA)
56485 (SECUNIA)
56535 (SECUNIA)
56486 (SECUNIA)
openSUSE-SU-2014:0177 (SUSE)
RHSA-2014:0097 (REDHAT)
SUSE-SU-2014:0266 (SUSE)
openSUSE-SU-2014:0174 (SUSE)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0134 (REDHAT)
USN-2089-1 (UBUNTU)
RHSA-2014:0027 (REDHAT)
RHSA-2014:0026 (REDHAT)
openSUSE-SU-2014:0180 (SUSE)
USN-2124-1 (UBUNTU)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-5884
CVE: CVE-2013-5884
Id:
CVE-2013-5884
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5884
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an incorrect check for code permissions by CORBA stub factories.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
https://bugzilla.redhat.com/show_bug.cgi?id=1051911 (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/b1548473f261 (MISC)
102016 (OSVDB)
1029608 (SECTRACK)
64924 (BID)
56432 (SECUNIA)
56485 (SECUNIA)
56535 (SECUNIA)
56486 (SECUNIA)
openSUSE-SU-2014:0177 (SUSE)
RHSA-2014:0097 (REDHAT)
SUSE-SU-2014:0266 (SUSE)
openSUSE-SU-2014:0174 (SUSE)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0134 (REDHAT)
USN-2089-1 (UBUNTU)
RHSA-2014:0027 (REDHAT)
RHSA-2014:0026 (REDHAT)
openSUSE-SU-2014:0180 (SUSE)
USN-2124-1 (UBUNTU)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
oracle-cpujan2014-cve20135884(90348) (XF)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-5887
CVE: CVE-2013-5887
Id:
CVE-2013-5887
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5887
Comment
: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect availability via unknown vectors related to Deployment.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
1029608 (SECTRACK)
56485 (SECUNIA)
56535 (SECUNIA)
102013 (OSVDB)
64875 (BID)
SUSE-SU-2014:0266 (SUSE)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
RHSA-2014:0134 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
oracle-cpujan2014-cve20135887(90345) (XF)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-5888
CVE: CVE-2013-5888
Id:
CVE-2013-5888
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5888
Comment
: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, when running with GNOME, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVSSv2 Score:
4.6
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:P/I:P/A:P
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
1029608 (SECTRACK)
102023 (OSVDB)
56485 (SECUNIA)
56535 (SECUNIA)
64925 (BID)
SUSE-SU-2014:0266 (SUSE)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
RHSA-2014:0134 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
oracle-cpujan2014-cve20135888(90354) (XF)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-5889
CVE: CVE-2013-5889
Id:
CVE-2013-5889
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5889
Comment
: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, CVE-2014-0418, and CVE-2014-0424.
CVSSv2 Score:
9.3
Access vector:
NETWORK
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
102020 (OSVDB)
1029608 (SECTRACK)
64931 (BID)
56485 (SECUNIA)
56535 (SECUNIA)
SUSE-SU-2014:0266 (SUSE)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
RHSA-2014:0134 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-5896
CVE: CVE-2013-5896
Id:
CVE-2013-5896
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5896
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that com.sun.corba.se and its sub-packages are not included on the restricted package list.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
1029608 (SECTRACK)
64926 (BID)
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/694ad155b344 (CONFIRM)
https://bugzilla.redhat.com/show_bug.cgi?id=1053266 (CONFIRM)
56432 (SECUNIA)
56485 (SECUNIA)
56535 (SECUNIA)
102015 (OSVDB)
56486 (SECUNIA)
openSUSE-SU-2014:0177 (SUSE)
SUSE-SU-2014:0266 (SUSE)
RHSA-2014:0097 (REDHAT)
openSUSE-SU-2014:0174 (SUSE)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0134 (REDHAT)
USN-2089-1 (UBUNTU)
RHSA-2014:0027 (REDHAT)
RHSA-2014:0026 (REDHAT)
openSUSE-SU-2014:0180 (SUSE)
USN-2124-1 (UBUNTU)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
oracle-cpujan2014-cve20135896(90347) (XF)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-5898
CVE: CVE-2013-5898
Id:
CVE-2013-5898
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5898
Comment
: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-0375 and CVE-2014-0403.
CVSSv2 Score:
4
Access vector:
NETWORK
Access complexity:
HIGH
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:H/Au:N/C:P/I:P/A:N
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
1029608 (SECTRACK)
64912 (BID)
102027 (OSVDB)
56485 (SECUNIA)
56535 (SECUNIA)
SUSE-SU-2014:0266 (SUSE)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
RHSA-2014:0134 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
oracle-cpujan2014-cve20135898(90356) (XF)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-5899
CVE: CVE-2013-5899
Id:
CVE-2013-5899
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5899
Comment
: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
1029608 (SECTRACK)
64928 (BID)
102014 (OSVDB)
56485 (SECUNIA)
56535 (SECUNIA)
SUSE-SU-2014:0266 (SUSE)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
RHSA-2014:0134 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
oracle-cpujan2014-cve20135899(90346) (XF)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-5907
CVE: CVE-2013-5907
Id:
CVE-2013-5907
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5907
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is due to incorrect input validation in LookupProcessor.cpp in the ICU Layout Engine, which allows attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted font file.
CVSSv2 Score:
10
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
https://bugzilla.redhat.com/show_bug.cgi?id=1052915 (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/9d29c19f1de1 (MISC)
1029608 (SECTRACK)
56487 (SECUNIA)
64894 (BID)
101995 (OSVDB)
56432 (SECUNIA)
56485 (SECUNIA)
56535 (SECUNIA)
56486 (SECUNIA)
openSUSE-SU-2014:0177 (SUSE)
RHSA-2014:0097 (REDHAT)
SUSE-SU-2014:0266 (SUSE)
openSUSE-SU-2014:0174 (SUSE)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0136 (REDHAT)
RHSA-2014:0134 (REDHAT)
USN-2089-1 (UBUNTU)
RHSA-2014:0027 (REDHAT)
RHSA-2014:0026 (REDHAT)
openSUSE-SU-2014:0180 (SUSE)
USN-2124-1 (UBUNTU)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-5910
CVE: CVE-2013-5910
Id:
CVE-2013-5910
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5910
Comment
: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that CanonicalizerBase.java in the XML canonicalizer allows untrusted code to access mutable byte arrays.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:N/I:P/A:N
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
1029608 (SECTRACK)
https://bugzilla.redhat.com/show_bug.cgi?id=1052942 (CONFIRM)
102021 (OSVDB)
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/07004bb53c3c (CONFIRM)
56432 (SECUNIA)
56485 (SECUNIA)
56535 (SECUNIA)
64933 (BID)
56486 (SECUNIA)
openSUSE-SU-2014:0177 (SUSE)
SUSE-SU-2014:0266 (SUSE)
RHSA-2014:0097 (REDHAT)
openSUSE-SU-2014:0174 (SUSE)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0134 (REDHAT)
USN-2089-1 (UBUNTU)
RHSA-2014:0027 (REDHAT)
RHSA-2014:0026 (REDHAT)
openSUSE-SU-2014:0180 (SUSE)
USN-2124-1 (UBUNTU)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
oracle-cpujan2014-cve20135910(90352) (XF)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2013-6629
CVE: CVE-2013-6629
Id:
CVE-2013-6629
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6629
Comment
: The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE:
200 (Information Exposure)
References:
https://code.google.com/p/chromium/issues/detail?id=258723 (CONFIRM)
https://src.chromium.org/viewvc/chrome?revision=229729&view=revision (CONFIRM)
20131112 bugs in IJG jpeg6b & libjpeg-turbo (FULLDISC)
http://bugs.ghostscript.com/show_bug.cgi?id=686980 (CONFIRM)
http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html (CONFIRM)
http://www.mozilla.org/security/announce/2013/mfsa2013-116.html (CONFIRM)
https://bugzilla.mozilla.org/show_bug.cgi?id=891693 (CONFIRM)
DSA-2799 (DEBIAN)
RHSA-2013:1803 (REDHAT)
openSUSE-SU-2013:1776 (SUSE)
openSUSE-SU-2013:1861 (SUSE)
RHSA-2013:1804 (REDHAT)
USN-2053-1 (UBUNTU)
USN-2052-1 (UBUNTU)
openSUSE-SU-2013:1777 (SUSE)
FEDORA-2013-23127 (FEDORA)
openSUSE-SU-2013:1957 (SUSE)
openSUSE-SU-2013:1959 (SUSE)
openSUSE-SU-2013:1958 (SUSE)
56175 (SECUNIA)
openSUSE-SU-2014:0008 (SUSE)
FEDORA-2013-23295 (FEDORA)
openSUSE-SU-2013:1917 (SUSE)
USN-2060-1 (UBUNTU)
openSUSE-SU-2013:1916 (SUSE)
FEDORA-2013-23291 (FEDORA)
openSUSE-SU-2013:1918 (SUSE)
FEDORA-2013-23519 (FEDORA)
openSUSE-SU-2014:0065 (SUSE)
http://support.apple.com/kb/HT6150 (CONFIRM)
MDVSA-2013:273 (MANDRIVA)
http://advisories.mageia.org/MGASA-2013-0333.html (CONFIRM)
http://support.apple.com/kb/HT6163 (CONFIRM)
http://support.apple.com/kb/HT6162 (CONFIRM)
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21676746 (CONFIRM)
58974 (SECUNIA)
59058 (SECUNIA)
https://www.ibm.com/support/docview.wss?uid=swg21675973 (CONFIRM)
GLSA-201406-32 (GENTOO)
1029476 (SECTRACK)
1029470 (SECTRACK)
GLSA-201606-03 (GENTOO)
SSRT101668 (HP)
SSRT101667 (HP)
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html (CONFIRM)
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 (CONFIRM)
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2013-6629 (CONFIRM)
63676 (BID)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2013-6954
CVE: CVE-2013-6954
Id:
CVE-2013-6954
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6954
Comment
: The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE:
CWE-Other ()
References:
http://www.libpng.org/pub/png/libpng.html (MISC)
http://sourceforge.net/p/libpng/code/ci/1faa6ff32c648acfe3cf30a58d31d7aebc24968c (CONFIRM)
VU#650142 (CERT-VN)
https://bugzilla.redhat.com/show_bug.cgi?id=1045561 (CONFIRM)
http://sourceforge.net/projects/libpng/files/libpng16/1.6.8/ (CONFIRM)
MDVSA-2014:035 (MANDRIVA)
FEDORA-2014-1803 (FEDORA)
FEDORA-2014-1770 (FEDORA)
FEDORA-2014-1754 (FEDORA)
FEDORA-2014-1778 (FEDORA)
http://advisories.mageia.org/MGASA-2014-0075.html (CONFIRM)
64493 (BID)
FEDORA-2014-1766 (FEDORA)
openSUSE-SU-2014:0100 (SUSE)
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21676746 (CONFIRM)
58974 (SECUNIA)
59058 (SECUNIA)
https://www.ibm.com/support/docview.wss?uid=swg21675973 (CONFIRM)
GLSA-201406-32 (GENTOO)
SSRT101668 (HP)
SSRT101667 (HP)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-0368
CVE: CVE-2014-0368
Id:
CVE-2014-0368
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0368
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and Java SE Embedded 7u45, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to incorrect permission checks when listening on a socket, which allows attackers to escape the sandbox.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
https://bugzilla.redhat.com/show_bug.cgi?id=1052919 (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/e6160aedadd5 (MISC)
64930 (BID)
1029608 (SECTRACK)
56432 (SECUNIA)
56485 (SECUNIA)
56535 (SECUNIA)
56486 (SECUNIA)
openSUSE-SU-2014:0177 (SUSE)
USN-2089-1 (UBUNTU)
SUSE-SU-2014:0266 (SUSE)
RHSA-2014:0097 (REDHAT)
openSUSE-SU-2014:0174 (SUSE)
USN-2124-1 (UBUNTU)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0134 (REDHAT)
RHSA-2014:0136 (REDHAT)
RHSA-2014:0027 (REDHAT)
RHSA-2014:0026 (REDHAT)
openSUSE-SU-2014:0180 (SUSE)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21676978 (CONFIRM)
59339 (SECUNIA)
59235 (SECUNIA)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2014-0373
CVE: CVE-2014-0373
Id:
CVE-2014-0373
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0373
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to throwing of an incorrect exception when SnmpStatusException should have been used in the SNMP implementation, which allows attackers to escape the sandbox.
CVSSv2 Score:
7.5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
https://bugzilla.redhat.com/show_bug.cgi?id=1051699 (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/496c51673dec (MISC)
1029608 (SECTRACK)
64922 (BID)
56432 (SECUNIA)
56485 (SECUNIA)
56535 (SECUNIA)
openSUSE-SU-2014:0177 (SUSE)
USN-2089-1 (UBUNTU)
SUSE-SU-2014:0266 (SUSE)
RHSA-2014:0097 (REDHAT)
openSUSE-SU-2014:0174 (SUSE)
USN-2124-1 (UBUNTU)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0134 (REDHAT)
RHSA-2014:0136 (REDHAT)
RHSA-2014:0027 (REDHAT)
RHSA-2014:0026 (REDHAT)
openSUSE-SU-2014:0180 (SUSE)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2014-0375
CVE: CVE-2014-0375
Id:
CVE-2014-0375
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0375
Comment
: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5898 and CVE-2014-0403.
CVSSv2 Score:
5.8
Access vector:
NETWORK
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:N
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
1029608 (SECTRACK)
102007 (OSVDB)
56485 (SECUNIA)
56535 (SECUNIA)
64916 (BID)
SUSE-SU-2014:0266 (SUSE)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
RHSA-2014:0134 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
oracle-cpujan2014-cve20140375(90339) (XF)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2014-0376
CVE: CVE-2014-0376
Id:
CVE-2014-0376
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0376
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAXP. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an improper check for "code permissions when creating document builder factories."
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:N/I:P/A:N
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/783ceae9b736 (MISC)
http://hg.openjdk.java.net/jdk7u/jdk7u/jaxp/rev/42be8e6266ab (MISC)
https://bugzilla.redhat.com/show_bug.cgi?id=1051923 (CONFIRM)
1029608 (SECTRACK)
64907 (BID)
102018 (OSVDB)
56535 (SECUNIA)
56485 (SECUNIA)
56432 (SECUNIA)
56486 (SECUNIA)
openSUSE-SU-2014:0177 (SUSE)
USN-2089-1 (UBUNTU)
RHSA-2014:0097 (REDHAT)
SUSE-SU-2014:0266 (SUSE)
openSUSE-SU-2014:0174 (SUSE)
USN-2124-1 (UBUNTU)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0136 (REDHAT)
RHSA-2014:0134 (REDHAT)
RHSA-2014:0027 (REDHAT)
RHSA-2014:0026 (REDHAT)
openSUSE-SU-2014:0180 (SUSE)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
oracle-cpujan2014-cve20140376(90350) (XF)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2014-0387
CVE: CVE-2014-0387
Id:
CVE-2014-0387
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0387
Comment
: Unspecified vulnerability in Oracle Java SE 6u65 and Java SE 7u45, when running on Firefox, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVSSv2 Score:
7.6
Access vector:
NETWORK
Access complexity:
HIGH
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:H/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
1029608 (SECTRACK)
64882 (BID)
56485 (SECUNIA)
56535 (SECUNIA)
102002 (OSVDB)
SUSE-SU-2014:0266 (SUSE)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
RHSA-2014:0134 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2014-0403
CVE: CVE-2014-0403
Id:
CVE-2014-0403
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0403
Comment
: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5898 and CVE-2014-0375.
CVSSv2 Score:
5.8
Access vector:
NETWORK
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:N
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
1029608 (SECTRACK)
64920 (BID)
102006 (OSVDB)
56485 (SECUNIA)
56535 (SECUNIA)
SUSE-SU-2014:0266 (SUSE)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
RHSA-2014:0134 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
oracle-cpujan2014-cve20140403(90338) (XF)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2014-0410
CVE: CVE-2014-0410
Id:
CVE-2014-0410
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0410
Comment
: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0415, CVE-2014-0418, and CVE-2014-0424.
CVSSv2 Score:
10
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
1029608 (SECTRACK)
64915 (BID)
102024 (OSVDB)
56485 (SECUNIA)
56535 (SECUNIA)
SUSE-SU-2014:0266 (SUSE)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
RHSA-2014:0134 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2014-0411
CVE: CVE-2014-0411
Id:
CVE-2014-0411
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0411
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information about encryption keys via a timing discrepancy during the TLS/SSL handshake.
CVSSv2 Score:
4
Access vector:
NETWORK
Access complexity:
HIGH
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:H/Au:N/C:P/I:P/A:N
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d533e96c7acc (CONFIRM)
56487 (SECUNIA)
64918 (BID)
56432 (SECUNIA)
56485 (SECUNIA)
56535 (SECUNIA)
56486 (SECUNIA)
1029608 (SECTRACK)
102028 (OSVDB)
https://bugzilla.redhat.com/show_bug.cgi?id=1053010 (CONFIRM)
openSUSE-SU-2014:0177 (SUSE)
USN-2089-1 (UBUNTU)
RHSA-2014:0097 (REDHAT)
SUSE-SU-2014:0266 (SUSE)
openSUSE-SU-2014:0174 (SUSE)
USN-2124-1 (UBUNTU)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0136 (REDHAT)
RHSA-2014:0134 (REDHAT)
RHSA-2014:0027 (REDHAT)
RHSA-2014:0026 (REDHAT)
openSUSE-SU-2014:0180 (SUSE)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
59254 (SECUNIA)
59082 (SECUNIA)
https://www.ibm.com/support/docview.wss?uid=swg21675223 (CONFIRM)
http://www.ibm.com/support/docview.wss?uid=swg21672078 (CONFIRM)
59071 (SECUNIA)
59251 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004656 (CONFIRM)
59704 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21669519 (CONFIRM)
59872 (SECUNIA)
https://www.ibm.com/support/docview.wss?uid=swg21677913 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21675938 (CONFIRM)
59037 (SECUNIA)
http://www.ibm.com/support/docview.wss?uid=ssg1S1004745 (CONFIRM)
57809 (SECUNIA)
59665 (SECUNIA)
http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096132 (CONFIRM)
60498 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21680234 (CONFIRM)
60005 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21680387 (CONFIRM)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21682904 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21682671 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21682670 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21682669 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21682668 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21677388 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21676978 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21676373 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21676190 (CONFIRM)
60836 (SECUNIA)
60835 (SECUNIA)
60833 (SECUNIA)
59705 (SECUNIA)
59339 (SECUNIA)
59324 (SECUNIA)
59283 (SECUNIA)
59235 (SECUNIA)
59194 (SECUNIA)
oracle-cpujan2014-cve20140411(90357) (XF)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2014-0415
CVE: CVE-2014-0415
Id:
CVE-2014-0415
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0415
Comment
: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0418, and CVE-2014-0424.
CVSSv2 Score:
10
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
1029608 (SECTRACK)
64899 (BID)
102025 (OSVDB)
56485 (SECUNIA)
56535 (SECUNIA)
SUSE-SU-2014:0266 (SUSE)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
RHSA-2014:0134 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2014-0416
CVE: CVE-2014-0416
Id:
CVE-2014-0416
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0416
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to how principals are set for the Subject class, which allows attackers to escape the sandbox using deserialization of a crafted Subject instance.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:N/I:P/A:N
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
https://bugzilla.redhat.com/show_bug.cgi?id=1051912 (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/abe1cb2d27cb (MISC)
1029608 (SECTRACK)
64937 (BID)
56432 (SECUNIA)
56485 (SECUNIA)
56535 (SECUNIA)
102017 (OSVDB)
56486 (SECUNIA)
openSUSE-SU-2014:0177 (SUSE)
USN-2089-1 (UBUNTU)
RHSA-2014:0097 (REDHAT)
SUSE-SU-2014:0266 (SUSE)
openSUSE-SU-2014:0174 (SUSE)
USN-2124-1 (UBUNTU)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0136 (REDHAT)
RHSA-2014:0134 (REDHAT)
RHSA-2014:0027 (REDHAT)
RHSA-2014:0026 (REDHAT)
openSUSE-SU-2014:0180 (SUSE)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21679287 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21677388 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21677294 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21676978 (CONFIRM)
60568 (SECUNIA)
59339 (SECUNIA)
59307 (SECUNIA)
59283 (SECUNIA)
59235 (SECUNIA)
oracle-cpujan2014-cve20140416(90349) (XF)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2014-0417
CVE: CVE-2014-0417
Id:
CVE-2014-0417
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0417
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JavaFX 2.2.45; and Java SE Embedded 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVSSv2 Score:
9.3
Access vector:
NETWORK
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
64932 (BID)
1029608 (SECTRACK)
102001 (OSVDB)
56485 (SECUNIA)
56535 (SECUNIA)
56484 (SECUNIA)
56486 (SECUNIA)
SUSE-SU-2014:0266 (SUSE)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0136 (REDHAT)
RHSA-2014:0134 (REDHAT)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2014-0422
CVE: CVE-2014-0422
Id:
CVE-2014-0422
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0422
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to missing package access checks in the Naming / JNDI component, which allows attackers to escape the sandbox.
CVSSv2 Score:
10
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
https://bugzilla.redhat.com/show_bug.cgi?id=1051528 (CONFIRM)
1029608 (SECTRACK)
101997 (OSVDB)
56432 (SECUNIA)
56485 (SECUNIA)
56535 (SECUNIA)
64921 (BID)
56486 (SECUNIA)
openSUSE-SU-2014:0177 (SUSE)
USN-2089-1 (UBUNTU)
RHSA-2014:0097 (REDHAT)
SUSE-SU-2014:0266 (SUSE)
openSUSE-SU-2014:0174 (SUSE)
USN-2124-1 (UBUNTU)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0134 (REDHAT)
RHSA-2014:0136 (REDHAT)
RHSA-2014:0027 (REDHAT)
RHSA-2014:0026 (REDHAT)
openSUSE-SU-2014:0180 (SUSE)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2014-0423
CVE: CVE-2014-0423
Id:
CVE-2014-0423
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0423
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability in DocumentHandler.java, related to Beans decoding.
CVSSv2 Score:
5.5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
SINGLE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:S/C:P/I:N/A:P
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
https://bugzilla.redhat.com/show_bug.cgi?id=1053066 (CONFIRM)
1029608 (SECTRACK)
56487 (SECUNIA)
http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/995b32f013f5 (CONFIRM)
64914 (BID)
56432 (SECUNIA)
56485 (SECUNIA)
56535 (SECUNIA)
56486 (SECUNIA)
openSUSE-SU-2014:0177 (SUSE)
USN-2089-1 (UBUNTU)
RHSA-2014:0097 (REDHAT)
SUSE-SU-2014:0266 (SUSE)
openSUSE-SU-2014:0174 (SUSE)
USN-2124-1 (UBUNTU)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0136 (REDHAT)
RHSA-2014:0134 (REDHAT)
RHSA-2014:0027 (REDHAT)
RHSA-2014:0026 (REDHAT)
openSUSE-SU-2014:0180 (SUSE)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21679287 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21677388 (CONFIRM)
60568 (SECUNIA)
59283 (SECUNIA)
oracle-cpujan2014-cve20140423(90340) (XF)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2014-0424
CVE: CVE-2014-0424
Id:
CVE-2014-0424
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0424
Comment
: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, and CVE-2014-0418.
CVSSv2 Score:
7.5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
64919 (BID)
102004 (OSVDB)
1029608 (SECTRACK)
56485 (SECUNIA)
56535 (SECUNIA)
SUSE-SU-2014:0266 (SUSE)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
RHSA-2014:0134 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2014-0428
CVE: CVE-2014-0428
Id:
CVE-2014-0428
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0428
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to "insufficient security checks in IIOP streams," which allows attackers to escape the sandbox.
CVSSv2 Score:
10
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html (CONFIRM)
64758 (BID)
https://bugzilla.redhat.com/show_bug.cgi?id=1051519 (CONFIRM)
http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/0a879f00b698 (MISC)
1029608 (SECTRACK)
64935 (BID)
101996 (OSVDB)
56432 (SECUNIA)
56485 (SECUNIA)
56535 (SECUNIA)
56486 (SECUNIA)
openSUSE-SU-2014:0177 (SUSE)
USN-2089-1 (UBUNTU)
RHSA-2014:0097 (REDHAT)
SUSE-SU-2014:0266 (SUSE)
openSUSE-SU-2014:0174 (SUSE)
USN-2124-1 (UBUNTU)
SUSE-SU-2014:0246 (SUSE)
RHSA-2014:0136 (REDHAT)
RHSA-2014:0134 (REDHAT)
RHSA-2014:0027 (REDHAT)
RHSA-2014:0026 (REDHAT)
openSUSE-SU-2014:0180 (SUSE)
RHSA-2014:0135 (REDHAT)
RHSA-2014:0030 (REDHAT)
SSRT101454 (HP)
SSRT101455 (HP)
SUSE-SU-2014:0451 (SUSE)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 (CONFIRM)
RHSA-2014:0414 (REDHAT)
CVE: CVE-2014-0429
CVE: CVE-2014-0429
Id:
CVE-2014-0429
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0429
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVSSv2 Score:
10
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
DSA-2912 (DEBIAN)
USN-2191-1 (UBUNTU)
58415 (SECUNIA)
USN-2187-1 (UBUNTU)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
59058 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21676746 (CONFIRM)
58974 (SECUNIA)
https://www.ibm.com/support/docview.wss?uid=swg21675973 (CONFIRM)
GLSA-201406-32 (GENTOO)
GLSA-201502-12 (GENTOO)
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 (CONFIRM)
SSRT101668 (HP)
66856 (BID)
RHSA-2014:0685 (REDHAT)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-0446
CVE: CVE-2014-0446
Id:
CVE-2014-0446
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0446
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
CVSSv2 Score:
7.5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
DSA-2912 (DEBIAN)
USN-2191-1 (UBUNTU)
58415 (SECUNIA)
USN-2187-1 (UBUNTU)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
59058 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21676746 (CONFIRM)
GLSA-201406-32 (GENTOO)
GLSA-201502-12 (GENTOO)
SSRT101668 (HP)
SSRT101667 (HP)
66903 (BID)
RHSA-2014:0685 (REDHAT)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-0448
CVE: CVE-2014-0448
Id:
CVE-2014-0448
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0448
Comment
: Unspecified vulnerability in Oracle Java SE 7u51 and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVSSv2 Score:
7.6
Access vector:
NETWORK
Access complexity:
HIGH
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:H/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
GLSA-201502-12 (GENTOO)
SSRT101667 (HP)
66904 (BID)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-0449
CVE: CVE-2014-0449
Id:
CVE-2014-0449
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0449
Comment
: Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
GLSA-201502-12 (GENTOO)
SSRT101668 (HP)
SSRT101667 (HP)
66907 (BID)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-0451
CVE: CVE-2014-0451
Id:
CVE-2014-0451
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0451
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-2412.
CVSSv2 Score:
7.5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
DSA-2912 (DEBIAN)
USN-2191-1 (UBUNTU)
58415 (SECUNIA)
USN-2187-1 (UBUNTU)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
GLSA-201406-32 (GENTOO)
GLSA-201502-12 (GENTOO)
SSRT101668 (HP)
SSRT101667 (HP)
66879 (BID)
RHSA-2014:0685 (REDHAT)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-0452
CVE: CVE-2014-0452
Id:
CVE-2014-0452
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0452
Comment
: Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423.
CVSSv2 Score:
7.5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
DSA-2912 (DEBIAN)
USN-2191-1 (UBUNTU)
58415 (SECUNIA)
USN-2187-1 (UBUNTU)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
GLSA-201406-32 (GENTOO)
GLSA-201502-12 (GENTOO)
SSRT101668 (HP)
SSRT101667 (HP)
66891 (BID)
RHSA-2014:0685 (REDHAT)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-0453
CVE: CVE-2014-0453
Id:
CVE-2014-0453
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0453
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.
CVSSv2 Score:
4
Access vector:
NETWORK
Access complexity:
HIGH
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:H/Au:N/C:P/I:P/A:N
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
DSA-2912 (DEBIAN)
USN-2191-1 (UBUNTU)
58415 (SECUNIA)
USN-2187-1 (UBUNTU)
59104 (SECUNIA)
59255 (SECUNIA)
http://www.ibm.com/support/docview.wss?uid=swg21675343 (CONFIRM)
http://www.ibm.com/support/docview.wss?uid=swg21675588 (CONFIRM)
59250 (SECUNIA)
59071 (SECUNIA)
https://www.ibm.com/support/docview.wss?uid=swg21674530 (CONFIRM)
59082 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
66914 (BID)
59438 (SECUNIA)
59733 (SECUNIA)
59022 (SECUNIA)
59722 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21674539 (CONFIRM)
59023 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21676703 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21675945 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21673836 (CONFIRM)
59675 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21678113 (CONFIRM)
60003 (SECUNIA)
http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096132 (CONFIRM)
60498 (SECUNIA)
59653 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21681047 (CONFIRM)
60111 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21681018 (CONFIRM)
60117 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21679713 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21681256 (CONFIRM)
http://www.ibm.com/support/docview.wss?uid=swg21677387 (CONFIRM)
GLSA-201406-32 (GENTOO)
http://www-01.ibm.com/support/docview.wss?uid=swg21680387 (CONFIRM)
61050 (SECUNIA)
GLSA-201502-12 (GENTOO)
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 (CONFIRM)
SSRT101668 (HP)
SSRT101667 (HP)
http://www-01.ibm.com/support/docview.wss?uid=swg21683484 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21680750 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21679610 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21677294 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21676672 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21676373 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21676190 (CONFIRM)
61264 (SECUNIA)
60580 (SECUNIA)
60574 (SECUNIA)
59436 (SECUNIA)
59324 (SECUNIA)
59307 (SECUNIA)
59194 (SECUNIA)
RHSA-2014:0685 (REDHAT)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-0454
CVE: CVE-2014-0454
Id:
CVE-2014-0454
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0454
Comment
: Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.
CVSSv2 Score:
7.5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
USN-2187-1 (UBUNTU)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
58974 (SECUNIA)
https://www.ibm.com/support/docview.wss?uid=swg21675973 (CONFIRM)
GLSA-201502-12 (GENTOO)
SSRT101667 (HP)
66905 (BID)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-0455
CVE: CVE-2014-0455
Id:
CVE-2014-0455
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0455
Comment
: Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-2402.
CVSSv2 Score:
9.3
Access vector:
NETWORK
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
USN-2187-1 (UBUNTU)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
58974 (SECUNIA)
https://www.ibm.com/support/docview.wss?uid=swg21675973 (CONFIRM)
GLSA-201502-12 (GENTOO)
SSRT101667 (HP)
66899 (BID)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-0457
CVE: CVE-2014-0457
Id:
CVE-2014-0457
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0457
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
CVSSv2 Score:
10
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
DSA-2912 (DEBIAN)
USN-2191-1 (UBUNTU)
58415 (SECUNIA)
USN-2187-1 (UBUNTU)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
59058 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21676746 (CONFIRM)
58974 (SECUNIA)
https://www.ibm.com/support/docview.wss?uid=swg21675973 (CONFIRM)
GLSA-201406-32 (GENTOO)
GLSA-201502-12 (GENTOO)
SSRT101668 (HP)
66866 (BID)
RHSA-2014:0685 (REDHAT)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-0458
CVE: CVE-2014-0458
Id:
CVE-2014-0458
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0458
Comment
: Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423.
CVSSv2 Score:
7.5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
DSA-2912 (DEBIAN)
USN-2191-1 (UBUNTU)
58415 (SECUNIA)
USN-2187-1 (UBUNTU)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
GLSA-201406-32 (GENTOO)
GLSA-201502-12 (GENTOO)
SSRT101668 (HP)
SSRT101667 (HP)
66883 (BID)
RHSA-2014:0685 (REDHAT)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-0459
CVE: CVE-2014-0459
Id:
CVE-2014-0459
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0459
Comment
: Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.
CVSSv2 Score:
4.3
Access vector:
NETWORK
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:M/Au:N/C:N/I:N/A:P
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
DSA-2912 (DEBIAN)
USN-2191-1 (UBUNTU)
58415 (SECUNIA)
USN-2187-1 (UBUNTU)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
GLSA-201406-32 (GENTOO)
GLSA-201502-12 (GENTOO)
SSRT101667 (HP)
66910 (BID)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-0460
CVE: CVE-2014-0460
Id:
CVE-2014-0460
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0460
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.
CVSSv2 Score:
5.8
Access vector:
NETWORK
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:N
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
DSA-2912 (DEBIAN)
USN-2191-1 (UBUNTU)
58415 (SECUNIA)
USN-2187-1 (UBUNTU)
59255 (SECUNIA)
http://www.ibm.com/support/docview.wss?uid=swg21675343 (CONFIRM)
http://www.ibm.com/support/docview.wss?uid=swg21675588 (CONFIRM)
59250 (SECUNIA)
59071 (SECUNIA)
59082 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
59704 (SECUNIA)
59022 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21676315 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21676746 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21674539 (CONFIRM)
59023 (SECUNIA)
59058 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21673836 (CONFIRM)
60003 (SECUNIA)
60111 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21681018 (CONFIRM)
60117 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21679713 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21681256 (CONFIRM)
http://www.ibm.com/support/docview.wss?uid=swg21677387 (CONFIRM)
GLSA-201406-32 (GENTOO)
59642 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21686717 (CONFIRM)
GLSA-201502-12 (GENTOO)
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 (CONFIRM)
SSRT101668 (HP)
SSRT101667 (HP)
http://www-01.ibm.com/support/docview.wss?uid=swg21683484 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21677294 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21676672 (CONFIRM)
66916 (BID)
61264 (SECUNIA)
59706 (SECUNIA)
59705 (SECUNIA)
59516 (SECUNIA)
59436 (SECUNIA)
59307 (SECUNIA)
RHSA-2014:0685 (REDHAT)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-0461
CVE: CVE-2014-0461
Id:
CVE-2014-0461
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0461
Comment
: Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
CVSSv2 Score:
9.3
Access vector:
NETWORK
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
DSA-2912 (DEBIAN)
USN-2191-1 (UBUNTU)
58415 (SECUNIA)
USN-2187-1 (UBUNTU)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
59058 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21676746 (CONFIRM)
58974 (SECUNIA)
https://www.ibm.com/support/docview.wss?uid=swg21675973 (CONFIRM)
GLSA-201406-32 (GENTOO)
GLSA-201502-12 (GENTOO)
SSRT101668 (HP)
SSRT101667 (HP)
66902 (BID)
RHSA-2014:0685 (REDHAT)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-0878
CVE: CVE-2014-0878
Id:
CVE-2014-0878
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0878
Comment
: The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output.
CVSSv2 Score:
5.8
Access vector:
NETWORK
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:N
CWE:
310 (Cryptographic Issues)
References:
http://www-01.ibm.com/support/docview.wss?uid=swg21672043 (CONFIRM)
http://www.ibm.com/support/docview.wss?uid=swg21675343 (CONFIRM)
67601 (BID)
http://www.ibm.com/support/docview.wss?uid=swg21675588 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21676703 (CONFIRM)
59058 (SECUNIA)
59022 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21676746 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21673836 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21674539 (CONFIRM)
59023 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21679713 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21681256 (CONFIRM)
http://www.ibm.com/support/docview.wss?uid=swg21677387 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21686717 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21689593 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21683484 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21680750 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21679610 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21676672 (CONFIRM)
61264 (SECUNIA)
ibm-java-cve20140878-weak-sec(91084) (XF)
CVE: CVE-2014-1876
CVE: CVE-2014-1876
Id:
CVE-2014-1876
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1876
Comment
: The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log.
CVSSv2 Score:
4.4
Access vector:
LOCAL
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:L/AC:M/Au:N/C:P/I:P/A:P
CWE:
59 (Improper Link Resolution Before File Access ('Link Following'))
References:
https://bugzilla.redhat.com/show_bug.cgi?id=1060907 (MISC)
[oss-security] 20140207 Re: CVE request and heads-up on insecure temp file handling in unpack200 (OpenJDK, Oracle Java) (MLIST)
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737562 (MISC)
102808 (OSVDB)
[oss-security] 20140203 CVE request and heads-up on insecure temp file handling in unpack200 (OpenJDK, Oracle Java) (MLIST)
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
DSA-2912 (DEBIAN)
USN-2191-1 (UBUNTU)
58415 (SECUNIA)
USN-2187-1 (UBUNTU)
65568 (BID)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
59058 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21676746 (CONFIRM)
http://www-01.ibm.com/support/docview.wss?uid=swg21679713 (CONFIRM)
GLSA-201406-32 (GENTOO)
SSRT101668 (HP)
SSRT101667 (HP)
RHSA-2014:0685 (REDHAT)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-2398
CVE: CVE-2014-2398
Id:
CVE-2014-2398
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2398
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.
CVSSv2 Score:
3.5
Access vector:
NETWORK
Access complexity:
MEDIUM
Authentication:
SINGLE
Confidentiality impact:
NONE
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:M/Au:S/C:N/I:P/A:N
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
DSA-2912 (DEBIAN)
USN-2191-1 (UBUNTU)
58415 (SECUNIA)
USN-2187-1 (UBUNTU)
66920 (BID)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
59058 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21676746 (CONFIRM)
GLSA-201406-32 (GENTOO)
GLSA-201502-12 (GENTOO)
SSRT101668 (HP)
SSRT101667 (HP)
RHSA-2014:0685 (REDHAT)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-2401
CVE: CVE-2014-2401
Id:
CVE-2014-2401
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2401
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
CVSSv2 Score:
5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
66911 (BID)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
59058 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21676746 (CONFIRM)
58974 (SECUNIA)
https://www.ibm.com/support/docview.wss?uid=swg21675973 (CONFIRM)
GLSA-201502-12 (GENTOO)
SSRT101668 (HP)
SSRT101667 (HP)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-2402
CVE: CVE-2014-2402
Id:
CVE-2014-2402
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2402
Comment
: Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-0455.
CVSSv2 Score:
7.5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
USN-2187-1 (UBUNTU)
66898 (BID)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
GLSA-201502-12 (GENTOO)
SSRT101667 (HP)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-2409
CVE: CVE-2014-2409
Id:
CVE-2014-2409
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2409
Comment
: Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.
CVSSv2 Score:
6.4
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:N
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
66915 (BID)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
GLSA-201502-12 (GENTOO)
SSRT101668 (HP)
SSRT101667 (HP)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-2412
CVE: CVE-2014-2412
Id:
CVE-2014-2412
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2412
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-0451.
CVSSv2 Score:
7.5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
DSA-2912 (DEBIAN)
USN-2191-1 (UBUNTU)
58415 (SECUNIA)
USN-2187-1 (UBUNTU)
66873 (BID)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
GLSA-201406-32 (GENTOO)
GLSA-201502-12 (GENTOO)
SSRT101668 (HP)
SSRT101667 (HP)
RHSA-2014:0685 (REDHAT)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-2414
CVE: CVE-2014-2414
Id:
CVE-2014-2414
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2414
Comment
: Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB.
CVSSv2 Score:
7.5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
DSA-2912 (DEBIAN)
USN-2191-1 (UBUNTU)
58415 (SECUNIA)
USN-2187-1 (UBUNTU)
66894 (BID)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
GLSA-201406-32 (GENTOO)
GLSA-201502-12 (GENTOO)
SSRT101668 (HP)
SSRT101667 (HP)
RHSA-2014:0685 (REDHAT)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-2420
CVE: CVE-2014-2420
Id:
CVE-2014-2420
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2420
Comment
: Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Deployment.
CVSSv2 Score:
2.6
Access vector:
NETWORK
Access complexity:
HIGH
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:H/Au:N/C:N/I:P/A:N
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
66919 (BID)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
http://www.ibm.com/support/docview.wss?uid=swg21677387 (CONFIRM)
60111 (SECUNIA)
GLSA-201502-12 (GENTOO)
SSRT101668 (HP)
SSRT101667 (HP)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-2421
CVE: CVE-2014-2421
Id:
CVE-2014-2421
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2421
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVSSv2 Score:
10
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
DSA-2912 (DEBIAN)
USN-2191-1 (UBUNTU)
58415 (SECUNIA)
USN-2187-1 (UBUNTU)
66881 (BID)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
59058 (SECUNIA)
http://www-01.ibm.com/support/docview.wss?uid=swg21676746 (CONFIRM)
GLSA-201406-32 (GENTOO)
GLSA-201502-12 (GENTOO)
SSRT101668 (HP)
SSRT101667 (HP)
RHSA-2014:0685 (REDHAT)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-2423
CVE: CVE-2014-2423
Id:
CVE-2014-2423
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2423
Comment
: Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-0458.
CVSSv2 Score:
7.5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
DSA-2912 (DEBIAN)
USN-2191-1 (UBUNTU)
58415 (SECUNIA)
USN-2187-1 (UBUNTU)
66887 (BID)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
GLSA-201406-32 (GENTOO)
GLSA-201502-12 (GENTOO)
SSRT101668 (HP)
SSRT101667 (HP)
RHSA-2014:0685 (REDHAT)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-2427
CVE: CVE-2014-2427
Id:
CVE-2014-2427
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2427
Comment
: Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.
CVSSv2 Score:
7.5
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
DSA-2912 (DEBIAN)
USN-2191-1 (UBUNTU)
58415 (SECUNIA)
USN-2187-1 (UBUNTU)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
GLSA-201406-32 (GENTOO)
GLSA-201502-12 (GENTOO)
SSRT101668 (HP)
SSRT101667 (HP)
66909 (BID)
RHSA-2014:0685 (REDHAT)
RHSA-2014:0675 (REDHAT)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
CVE: CVE-2014-2428
CVE: CVE-2014-2428
Id:
CVE-2014-2428
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2428
Comment
: Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVSSv2 Score:
7.6
Access vector:
NETWORK
Access complexity:
HIGH
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:H/Au:N/C:C/I:C/A:C
References:
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (CONFIRM)
66870 (BID)
http://www-01.ibm.com/support/docview.wss?uid=swg21672080 (CONFIRM)
GLSA-201502-12 (GENTOO)
SSRT101668 (HP)
SSRT101667 (HP)
RHSA-2014:0414 (REDHAT)
RHSA-2014:0413 (REDHAT)
Content available only for registered users!
ovaldb@altx-soft.com