CVE-2014-6601

Опубликовано: 20 янв. 2015

Источник: redhat

CVSS2: 6.8

Описание

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

A flaw was found in the way the Hotspot component in OpenJDK verified bytecode from the class files. An untrusted Java application or applet could possibly use this flaw to bypass Java sandbox restrictions.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 7	java-1.8.0-openjdk	Not affected
Red Hat Enterprise Linux 7	java-1.8.0-oracle	Not affected
Oracle Java for Red Hat Enterprise Linux 5	java-1.7.0-oracle	Fixed	RHSA-2015:0079	22.01.2015
Oracle Java for Red Hat Enterprise Linux 5	java-1.6.0-sun	Fixed	RHSA-2015:0086	26.01.2015
Oracle Java for Red Hat Enterprise Linux 6	java-1.7.0-oracle	Fixed	RHSA-2015:0079	22.01.2015
Oracle Java for Red Hat Enterprise Linux 6	java-1.8.0-oracle	Fixed	RHSA-2015:0080	22.01.2015
Oracle Java for Red Hat Enterprise Linux 6	java-1.6.0-sun	Fixed	RHSA-2015:0086	26.01.2015
Oracle Java for Red Hat Enterprise Linux 7	java-1.7.0-oracle	Fixed	RHSA-2015:0079	22.01.2015
Oracle Java for Red Hat Enterprise Linux 7	java-1.6.0-sun	Fixed	RHSA-2015:0086	26.01.2015
Red Hat Enterprise Linux 5	java-1.7.0-openjdk	Fixed	RHSA-2015:0068	20.01.2015

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Critical

https://bugzilla.redhat.com/show_bug.cgi?id=1183020OpenJDK: class verifier insufficient invokespecial calls verification (Hotspot, 8058982)

6.8 Medium

CVSS2

Связанные уязвимости

CVE-2014-6601

ubuntu

около 11 лет назад

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVE-2014-6601

nvd

около 11 лет назад

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVE-2014-6601

debian

около 11 лет назад

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allow ...

GHSA-cp93-48x3-6m3g

github

больше 3 лет назад

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

ELSA-2015-0085

oracle-oval

около 11 лет назад

ELSA-2015-0085: java-1.6.0-openjdk security update (IMPORTANT)

6.8 Medium

CVSS2