Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2013-5851

Опубликовано: 15 окт. 2013
Источник: redhat
CVSS2: 4.3

Описание

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JAXP.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5java-1.5.0-ibmNot affected
Red Hat Enterprise Linux 5java-1.6.0-openjdkAffected
Red Hat Enterprise Linux 6java-1.5.0-ibmNot affected
Red Hat Enterprise Linux 6java-1.6.0-openjdkAffected
Red Hat Enterprise Linux 5java-1.7.0-openjdkFixedRHSA-2013:144721.10.2013
Red Hat Enterprise Linux 6java-1.7.0-openjdkFixedRHSA-2013:145122.10.2013
Red Hat Network Satellite Server v 5.4java-1.6.0-ibmFixedRHSA-2013:179305.12.2013
Red Hat Network Satellite Server v 5.5java-1.6.0-ibmFixedRHSA-2013:179305.12.2013
Red Hat Satellite 5.6java-1.6.0-ibmFixedRHSA-2013:179305.12.2013
Supplementary for Red Hat Enterprise Linux 5java-1.7.0-oracleFixedRHSA-2013:144017.10.2013

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1018977OpenJDK: XML stream factory finder information leak (JAXP, 8013502)

4.3 Medium

CVSS2

Связанные уязвимости

ubuntu
около 12 лет назад

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JAXP.

nvd
около 12 лет назад

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JAXP.

debian
около 12 лет назад

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java ...

github
больше 3 лет назад

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JAXP.

oracle-oval
около 12 лет назад

ELSA-2013-1451: java-1.7.0-openjdk security update (CRITICAL)

4.3 Medium

CVSS2