Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2014-6512

Опубликовано: 14 окт. 2014
Источник: redhat
CVSS2: 4.3

Описание

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Libraries.

It was discovered that the DatagramSocket implementation in OpenJDK failed to perform source address checks for packets received on a connected socket. A remote attacker could use this flaw to have their packets processed as if they were received from the expected source.

Дополнительная информация

Статус:

Low
Дефект:
CWE-345
https://bugzilla.redhat.com/show_bug.cgi?id=1071210OpenJDK: DatagramSocket connected socket missing source check (Libraries, 8039509)

4.3 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 11 лет назад

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Libraries.

nvd
больше 11 лет назад

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Libraries.

debian
больше 11 лет назад

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u ...

github
больше 3 лет назад

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Libraries.

fstec
больше 11 лет назад

Уязвимость программной платформы Java Platform, позволяющая удаленному нарушителю нарушить целостность защищаемой информации

4.3 Medium

CVSS2