Описание
Security update for IBM Java
java-1_6_0-ibm has been updated to version 1.6.0_sr16.2 to fix 18 security issues.
These security issues has been fixed:
More information can be found at http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014 http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014
Security Issues:
Список пакетов
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP3-TERADATA
SUSE Linux Enterprise Server for SAP Applications 11 SP3
SUSE Linux Enterprise Software Development Kit 11 SP3
Ссылки
- Link for SUSE-SU-2015:1086-2
- E-Mail link for SUSE-SU-2015:1086-2
- SUSE Security Ratings
- SUSE Bug 592934
- SUSE Bug 817062
- SUSE Bug 819288
- SUSE Bug 823034
- SUSE Bug 829212
- SUSE Bug 849212
- SUSE Bug 862064
- SUSE Bug 877430
- SUSE Bug 891700
- SUSE Bug 904889
- SUSE Bug 912434
- SUSE Bug 912447
- SUSE Bug 916265
- SUSE Bug 916266
- SUSE Bug 930365
- SUSE Bug 931702
- SUSE CVE CVE-2013-0401 page
Описание
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions.
Затронутые продукты
Ссылки
- CVE-2013-0401
- SUSE Bug 816720
- SUSE Bug 817157
- SUSE Bug 819288
Описание
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013.
Затронутые продукты
Ссылки
- CVE-2013-1491
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory.
Затронутые продукты
Ссылки
- CVE-2013-1500
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the default java.rmi.server.useCodebaseOnly setting of false, which allows remote attackers to perform "dynamic class downloading" and execute arbitrary code.
Затронутые продукты
Ссылки
- CVE-2013-1537
- SUSE Bug 816720
- SUSE Bug 817157
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2433.
Затронутые продукты
Ссылки
- CVE-2013-1540
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "missing security restrictions" in the LogStream.setDefaultStream method.
Затронутые продукты
Ссылки
- CVE-2013-1557
- SUSE Bug 816720
- SUSE Bug 817157
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install.
Затронутые продукты
Ссылки
- CVE-2013-1563
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "checking of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Затронутые продукты
Ссылки
- CVE-2013-1569
- SUSE Bug 816720
- SUSE Bug 817157
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
Затронутые продукты
Ссылки
- CVE-2013-1571
- SUSE Bug 824397
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2384, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "handling of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Затронутые продукты
Ссылки
- CVE-2013-2383
- SUSE Bug 816720
- SUSE Bug 817157
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2383, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font layout" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Затронутые продукты
Ссылки
- CVE-2013-2384
- SUSE Bug 816720
- SUSE Bug 817157
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2432 and CVE-2013-1491.
Затронутые продукты
Ссылки
- CVE-2013-2394
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availability via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "XML security and the class loader."
Затронутые продукты
Ссылки
- CVE-2013-2407
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient indication of an SSL connection failure by JConsole, related to RMI connection dialog box.
Затронутые продукты
Ссылки
- CVE-2013-2412
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to Networking. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an information leak involving InetAddress serialization. CVE has not investigated the apparent discrepancy between vendor reports regarding the impact of this issue.
Затронутые продукты
Ссылки
- CVE-2013-2417
- SUSE Bug 816720
- SUSE Bug 817157
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2013-2418
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font processing errors" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Затронутые продукты
Ссылки
- CVE-2013-2419
- SUSE Bug 816720
- SUSE Bug 817157
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient "validation of images" in share/native/sun/awt/image/awt_ImageRep.c, possibly involving offsets.
Затронутые продукты
Ссылки
- CVE-2013-2420
- SUSE Bug 816720
- SUSE Bug 817157
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper method-invocation restrictions by the MethodUtil trampoline class, which allows remote attackers to bypass the Java sandbox.
Затронутые продукты
Ссылки
- CVE-2013-2422
- SUSE Bug 816720
- SUSE Bug 817157
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality via vectors related to JMX. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient class access checks" when "creating new instances" using MBeanInstantiator.
Затронутые продукты
Ссылки
- CVE-2013-2424
- SUSE Bug 816720
- SUSE Bug 817157
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "JPEGImageWriter state corruption" when using native code, which triggers memory corruption.
Затронутые продукты
Ссылки
- CVE-2013-2429
- SUSE Bug 816720
- SUSE Bug 817157
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; JavaFX 2.2.7 and earlier; and OpenJDK 6 and 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "JPEGImageReader state corruption" when using native code.
Затронутые продукты
Ссылки
- CVE-2013-2430
- SUSE Bug 816720
- SUSE Bug 817157
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2394 and CVE-2013-1491.
Затронутые продукты
Ссылки
- CVE-2013-2432
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-1540.
Затронутые продукты
Ссылки
- CVE-2013-2433
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2440.
Затронутые продукты
Ссылки
- CVE-2013-2435
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2013-2437
- SUSE Bug 825624
- SUSE Bug 829212
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2435.
Затронутые продукты
Ссылки
- CVE-2013-2440
- SUSE Bug 819288
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2466 and CVE-2013-2468.
Затронутые продукты
Ссылки
- CVE-2013-2442
- SUSE Bug 825624
- SUSE Bug 829212
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2452 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect "checking order" within the AccessControlContext class.
Затронутые продукты
Ссылки
- CVE-2013-2443
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not "properly manage and restrict certain resources related to the processing of fonts," possibly involving temporary files.
Затронутые продукты
Ссылки
- CVE-2013-2444
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams.
Затронутые продукты
Ссылки
- CVE-2013-2446
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket's local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost.
Затронутые продукты
Ссылки
- CVE-2013-2447
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to insufficient "access restrictions" and "robustness of sound classes."
Затронутые продукты
Ссылки
- CVE-2013-2448
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass.
Затронутые продукты
Ссылки
- CVE-2013-2450
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper enforcement of exclusive port binds when running on Windows, which allows attackers to bind to ports that are already in use.
Затронутые продукты
Ссылки
- CVE-2013-2451
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "network address handling in virtual machine identifiers" and the lack of "unique and unpredictable IDs" in the java.rmi.dgc.VMID class.
Затронутые продукты
Ссылки
- CVE-2013-2452
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to a missing check for "package access" by the MBeanServer Introspector.
Затронутые продукты
Ссылки
- CVE-2013-2453
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox.
Затронутые продукты
Ссылки
- CVE-2013-2454
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect access checks by the (1) getEnclosingClass, (2) getEnclosingMethod, and (3) getEnclosingConstructor methods.
Затронутые продукты
Ссылки
- CVE-2013-2455
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class.
Затронутые продукты
Ссылки
- CVE-2013-2456
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of "certain class checks" that allows remote attackers to bypass intended class restrictions.
Затронутые продукты
Ссылки
- CVE-2013-2457
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "integer overflow checks."
Затронутые продукты
Ссылки
- CVE-2013-2459
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image attribute verification" in 2D.
Затронутые продукты
Ссылки
- CVE-2013-2463
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, and CVE-2013-2473.
Затронутые продукты
Ссылки
- CVE-2013-2464
- SUSE Bug 825624
- SUSE Bug 829212
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D.
Затронутые продукты
Ссылки
- CVE-2013-2465
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2468.
Затронутые продукты
Ссылки
- CVE-2013-2466
- SUSE Bug 825624
- SUSE Bug 829212
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2466.
Затронутые продукты
Ссылки
- CVE-2013-2468
- SUSE Bug 825624
- SUSE Bug 829212
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image layout verification" in 2D.
Затронутые продукты
Ссылки
- CVE-2013-2469
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "ImagingLib byte lookup processing."
Затронутые продукты
Ссылки
- CVE-2013-2470
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect IntegerComponentRaster size checks."
Затронутые продукты
Ссылки
- CVE-2013-2471
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ShortBandedRaster size checks" in 2D.
Затронутые продукты
Ссылки
- CVE-2013-2472
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Затронутые продукты
Ссылки
- CVE-2013-2473
- SUSE Bug 825624
- SUSE Bug 828665
- SUSE Bug 829212
- SUSE Bug 829708
Описание
The com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 improperly exposes the invoke method of the java.lang.reflect.Method class, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to the AccessController doPrivileged block.
Затронутые продукты
Ссылки
- CVE-2013-3009
- SUSE Bug 829212
- SUSE Bug 977650
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3009 and CVE-2013-3012.
Затронутые продукты
Ссылки
- CVE-2013-3011
- SUSE Bug 829212
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3009 and CVE-2013-3011.
Затронутые продукты
Ссылки
- CVE-2013-3012
- SUSE Bug 829212
Описание
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 45 and earlier and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
Затронутые продукты
Ссылки
- CVE-2013-3743
- SUSE Bug 825624
- SUSE Bug 829212
Описание
Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
Затронутые продукты
Ссылки
- CVE-2013-3829
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names.
Затронутые продукты
Ссылки
- CVE-2013-4002
- SUSE Bug 829212
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to access restricted classes via unspecified vectors.
Затронутые продукты
Ссылки
- CVE-2013-4041
- SUSE Bug 849212
Описание
The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document that triggers expansion for many entities.
Затронутые продукты
Ссылки
- CVE-2013-5372
- SUSE Bug 849212
Описание
Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, 6.0.0 before SR15, and 5.0.0 before SR16 FP4 allows remote attackers to access restricted classes via unspecified vectors related to XML and XSL.
Затронутые продукты
Ссылки
- CVE-2013-5375
- SUSE Bug 849212
Описание
The com.ibm.rmi.io.SunSerializableFactory class in IBM Java SDK 7.0.0 before SR6 allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code via vectors related to deserialization inside the AccessController doPrivileged block.
Затронутые продукты
Ссылки
- CVE-2013-5456
- SUSE Bug 849212
- SUSE Bug 977646
- SUSE Bug 981057
- SUSE Bug 981060
- SUSE Bug 981087
Описание
Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to execute arbitrary code via unspecified vectors.
Затронутые продукты
Ссылки
- CVE-2013-5457
- SUSE Bug 849212
Описание
Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to execute arbitrary code via unspecified vectors.
Затронутые продукты
Ссылки
- CVE-2013-5458
- SUSE Bug 849212
Описание
Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u40 and earlier and Java SE 6u60 and earlier allows remote attackers to affect integrity via unknown vectors related to jhat.
Затронутые продукты
Ссылки
- CVE-2013-5772
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries.
Затронутые продукты
Ссылки
- CVE-2013-5774
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2013-5776
- SUSE Bug 846177
- SUSE Bug 849212
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.
Затронутые продукты
Ссылки
- CVE-2013-5778
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.
Затронутые продукты
Ссылки
- CVE-2013-5780
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Затронутые продукты
Ссылки
- CVE-2013-5782
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Swing.
Затронутые продукты
Ссылки
- CVE-2013-5783
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to SCRIPTING.
Затронутые продукты
Ссылки
- CVE-2013-5784
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5789, CVE-2013-5824, CVE-2013-5832, and CVE-2013-5852.
Затронутые продукты
Ссылки
- CVE-2013-5787
- SUSE Bug 846177
- SUSE Bug 849212
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2013-5788
- SUSE Bug 846177
- SUSE Bug 849212
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5824, CVE-2013-5832, and CVE-2013-5852.
Затронутые продукты
Ссылки
- CVE-2013-5789
- SUSE Bug 846177
- SUSE Bug 849212
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to BEANS.
Затронутые продукты
Ссылки
- CVE-2013-5790
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and JavaFX 2.2.40 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.
Затронутые продукты
Ссылки
- CVE-2013-5797
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JGSS.
Затронутые продукты
Ссылки
- CVE-2013-5800
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.
Затронутые продукты
Ссылки
- CVE-2013-5801
- SUSE Bug 846177
- SUSE Bug 849212
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXP.
Затронутые продукты
Ссылки
- CVE-2013-5802
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via vectors related to JGSS.
Затронутые продукты
Ссылки
- CVE-2013-5803
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, and JRockit R27.7.6 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Javadoc.
Затронутые продукты
Ссылки
- CVE-2013-5804
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-5829.
Затронутые продукты
Ссылки
- CVE-2013-5809
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2013-5812
- SUSE Bug 846177
- SUSE Bug 849212
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.
Затронутые продукты
Ссылки
- CVE-2013-5814
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI.
Затронутые продукты
Ссылки
- CVE-2013-5817
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5819 and CVE-2013-5831.
Затронутые продукты
Ссылки
- CVE-2013-5818
- SUSE Bug 846177
- SUSE Bug 849212
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5818 and CVE-2013-5831.
Затронутые продукты
Ссылки
- CVE-2013-5819
- SUSE Bug 846177
- SUSE Bug 849212
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to JAX-WS.
Затронутые продукты
Ссылки
- CVE-2013-5820
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via unknown vectors related to Security.
Затронутые продукты
Ссылки
- CVE-2013-5823
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5789, CVE-2013-5832, and CVE-2013-5852.
Затронутые продукты
Ссылки
- CVE-2013-5824
- SUSE Bug 846177
- SUSE Bug 849212
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via vectors related to JAXP.
Затронутые продукты
Ссылки
- CVE-2013-5825
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-5809.
Затронутые продукты
Ссылки
- CVE-2013-5829
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Затронутые продукты
Ссылки
- CVE-2013-5830
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5818 and CVE-2013-5819.
Затронутые продукты
Ссылки
- CVE-2013-5831
- SUSE Bug 846177
- SUSE Bug 849212
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5789, CVE-2013-5824, and CVE-2013-5852.
Затронутые продукты
Ссылки
- CVE-2013-5832
- SUSE Bug 846177
- SUSE Bug 849212
Описание
Unspecified vulnerability in Oracle Java SE 7u25 and earlier, and Java SE Embedded 7u25 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Затронутые продукты
Ссылки
- CVE-2013-5838
- SUSE Bug 846177
- SUSE Bug 849212
- SUSE Bug 972468
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.
Затронутые продукты
Ссылки
- CVE-2013-5840
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5850.
Затронутые продукты
Ссылки
- CVE-2013-5842
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JavaFX 2.2.40 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Затронутые продукты
Ссылки
- CVE-2013-5843
- SUSE Bug 846177
- SUSE Bug 849212
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and JavaFX 2.2.40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2013-5848
- SUSE Bug 846177
- SUSE Bug 849212
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to AWT.
Затронутые продукты
Ссылки
- CVE-2013-5849
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5842.
Затронутые продукты
Ссылки
- CVE-2013-5850
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JAXP.
Затронутые продукты
Ссылки
- CVE-2013-5851
- SUSE Bug 846177
- SUSE Bug 846999
- SUSE Bug 849212
- SUSE Bug 852367
Описание
Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the Security component does not properly handle null XML namespace (xmlns) attributes during XML document canonicalization, which allows attackers to escape the sandbox.
Затронутые продукты
Ссылки
- CVE-2013-5878
- SUSE Bug 858818
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an incorrect check for code permissions by CORBA stub factories.
Затронутые продукты
Ссылки
- CVE-2013-5884
- SUSE Bug 858818
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect availability via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2013-5887
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, when running with GNOME, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2013-5888
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, CVE-2014-0418, and CVE-2014-0424.
Затронутые продукты
Ссылки
- CVE-2013-5889
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that com.sun.corba.se and its sub-packages are not included on the restricted package list.
Затронутые продукты
Ссылки
- CVE-2013-5896
- SUSE Bug 858818
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-0375 and CVE-2014-0403.
Затронутые продукты
Ссылки
- CVE-2013-5898
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2013-5899
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is due to incorrect input validation in LookupProcessor.cpp in the ICU Layout Engine, which allows attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted font file.
Затронутые продукты
Ссылки
- CVE-2013-5907
- SUSE Bug 858818
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that CanonicalizerBase.java in the XML canonicalizer allows untrusted code to access mutable byte arrays.
Затронутые продукты
Ссылки
- CVE-2013-5910
- SUSE Bug 858818
- SUSE Bug 862064
Описание
The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.
Затронутые продукты
Ссылки
- CVE-2013-6629
- SUSE Bug 850430
- SUSE Bug 873872
- SUSE Bug 873873
- SUSE Bug 877429
- SUSE Bug 877430
- SUSE Bug 880246
Описание
The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.
Затронутые продукты
Ссылки
- CVE-2013-6954
- SUSE Bug 856522
- SUSE Bug 873872
- SUSE Bug 873873
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and Java SE Embedded 7u45, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to incorrect permission checks when listening on a socket, which allows attackers to escape the sandbox.
Затронутые продукты
Ссылки
- CVE-2014-0368
- SUSE Bug 858818
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to throwing of an incorrect exception when SnmpStatusException should have been used in the SNMP implementation, which allows attackers to escape the sandbox.
Затронутые продукты
Ссылки
- CVE-2014-0373
- SUSE Bug 858818
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5898 and CVE-2014-0403.
Затронутые продукты
Ссылки
- CVE-2014-0375
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAXP. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an improper check for "code permissions when creating document builder factories."
Затронутые продукты
Ссылки
- CVE-2014-0376
- SUSE Bug 858818
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 6u65 and Java SE 7u45, when running on Firefox, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2014-0387
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5898 and CVE-2014-0375.
Затронутые продукты
Ссылки
- CVE-2014-0403
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0415, CVE-2014-0418, and CVE-2014-0424.
Затронутые продукты
Ссылки
- CVE-2014-0410
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information about encryption keys via a timing discrepancy during the TLS/SSL handshake.
Затронутые продукты
Ссылки
- CVE-2014-0411
- SUSE Bug 858818
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0418, and CVE-2014-0424.
Затронутые продукты
Ссылки
- CVE-2014-0415
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to how principals are set for the Subject class, which allows attackers to escape the sandbox using deserialization of a crafted Subject instance.
Затронутые продукты
Ссылки
- CVE-2014-0416
- SUSE Bug 858818
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JavaFX 2.2.45; and Java SE Embedded 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Затронутые продукты
Ссылки
- CVE-2014-0417
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to missing package access checks in the Naming / JNDI component, which allows attackers to escape the sandbox.
Затронутые продукты
Ссылки
- CVE-2014-0422
- SUSE Bug 858818
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability in DocumentHandler.java, related to Beans decoding.
Затронутые продукты
Ссылки
- CVE-2014-0423
- SUSE Bug 858818
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, and CVE-2014-0418.
Затронутые продукты
Ссылки
- CVE-2014-0424
- SUSE Bug 862064
Описание
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to "insufficient security checks in IIOP streams," which allows attackers to escape the sandbox.
Затронутые продукты
Ссылки
- CVE-2014-0428
- SUSE Bug 858818
- SUSE Bug 862064
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Затронутые продукты
Ссылки
- CVE-2014-0429
- SUSE Bug 873872
- SUSE Bug 873873
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Затронутые продукты
Ссылки
- CVE-2014-0446
- SUSE Bug 873872
- SUSE Bug 873873
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2014-0449
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-2412.
Затронутые продукты
Ссылки
- CVE-2014-0451
- SUSE Bug 873872
- SUSE Bug 873873
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423.
Затронутые продукты
Ссылки
- CVE-2014-0452
- SUSE Bug 873872
- SUSE Bug 873873
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.
Затронутые продукты
Ссылки
- CVE-2014-0453
- SUSE Bug 873872
- SUSE Bug 873873
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Затронутые продукты
Ссылки
- CVE-2014-0457
- SUSE Bug 873872
- SUSE Bug 873873
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423.
Затронутые продукты
Ссылки
- CVE-2014-0458
- SUSE Bug 873872
- SUSE Bug 873873
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.
Затронутые продукты
Ссылки
- CVE-2014-0459
- SUSE Bug 873872
- SUSE Bug 873873
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.
Затронутые продукты
Ссылки
- CVE-2014-0460
- SUSE Bug 873872
- SUSE Bug 873873
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Затронутые продукты
Ссылки
- CVE-2014-0461
- SUSE Bug 873872
- SUSE Bug 873873
- SUSE Bug 877429
- SUSE Bug 877430
Описание
The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output.
Затронутые продукты
Ссылки
- CVE-2014-0878
- SUSE Bug 877429
- SUSE Bug 877430
Описание
The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log.
Затронутые продукты
Ссылки
- CVE-2014-1876
- SUSE Bug 863305
- SUSE Bug 873872
- SUSE Bug 873873
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.
Затронутые продукты
Ссылки
- CVE-2014-2398
- SUSE Bug 873872
- SUSE Bug 873873
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
Затронутые продукты
Ссылки
- CVE-2014-2401
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2014-2409
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-0451.
Затронутые продукты
Ссылки
- CVE-2014-2412
- SUSE Bug 873872
- SUSE Bug 873873
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB.
Затронутые продукты
Ссылки
- CVE-2014-2414
- SUSE Bug 873872
- SUSE Bug 873873
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2014-2420
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Затронутые продукты
Ссылки
- CVE-2014-2421
- SUSE Bug 873872
- SUSE Bug 873873
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-0458.
Затронутые продукты
Ссылки
- CVE-2014-2423
- SUSE Bug 873872
- SUSE Bug 873873
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.
Затронутые продукты
Ссылки
- CVE-2014-2427
- SUSE Bug 873872
- SUSE Bug 873873
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2014-2428
- SUSE Bug 877429
- SUSE Bug 877430
Описание
Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and before SR16 FP8 (5.0.16.8) allows local users to execute arbitrary code via vectors related to the shared classes cache.
Затронутые продукты
Ссылки
- CVE-2014-3065
- SUSE Bug 904889
- SUSE Bug 930365
Описание
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
Затронутые продукты
Ссылки
- CVE-2014-3566
- SUSE Bug 1011293
- SUSE Bug 1031023
- SUSE Bug 901223
- SUSE Bug 901254
- SUSE Bug 901277
- SUSE Bug 901748
- SUSE Bug 901757
- SUSE Bug 901759
- SUSE Bug 901889
- SUSE Bug 901968
- SUSE Bug 902229
- SUSE Bug 902233
- SUSE Bug 902476
- SUSE Bug 903405
- SUSE Bug 903684
- SUSE Bug 904889
- SUSE Bug 905106
- SUSE Bug 914041
- SUSE Bug 994144
Описание
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality and integrity via vectors related to JMX.
Затронутые продукты
Ссылки
- CVE-2014-4209
- SUSE Bug 887530
- SUSE Bug 891699
- SUSE Bug 891700
- SUSE Bug 891701
Описание
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Libraries.
Затронутые продукты
Ссылки
- CVE-2014-4218
- SUSE Bug 887530
- SUSE Bug 891699
- SUSE Bug 891700
- SUSE Bug 891701
Описание
Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
Затронутые продукты
Ссылки
- CVE-2014-4219
- SUSE Bug 887530
- SUSE Bug 891699
- SUSE Bug 891700
- SUSE Bug 891701
Описание
Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2014-4227
- SUSE Bug 887530
- SUSE Bug 891700
- SUSE Bug 891701
Описание
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and JRockit R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.
Затронутые продукты
Ссылки
- CVE-2014-4244
- SUSE Bug 887530
- SUSE Bug 891699
- SUSE Bug 891700
- SUSE Bug 891701
Описание
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Security.
Затронутые продукты
Ссылки
- CVE-2014-4252
- SUSE Bug 887530
- SUSE Bug 891699
- SUSE Bug 891700
- SUSE Bug 891701
Описание
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Затронутые продукты
Ссылки
- CVE-2014-4262
- SUSE Bug 887530
- SUSE Bug 891699
- SUSE Bug 891700
- SUSE Bug 891701
Описание
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to "Diffie-Hellman key agreement."
Затронутые продукты
Ссылки
- CVE-2014-4263
- SUSE Bug 887530
- SUSE Bug 891699
- SUSE Bug 891700
- SUSE Bug 891701
Описание
Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2014-4265
- SUSE Bug 887530
- SUSE Bug 891700
- SUSE Bug 891701
Описание
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Swing.
Затронутые продукты
Ссылки
- CVE-2014-4268
- SUSE Bug 887530
- SUSE Bug 891699
- SUSE Bug 891700
- SUSE Bug 891701
Описание
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532.
Затронутые продукты
Ссылки
- CVE-2014-4288
- SUSE Bug 901239
- SUSE Bug 901242
- SUSE Bug 901246
- SUSE Bug 904889
Описание
Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Затронутые продукты
Ссылки
- CVE-2014-6456
- SUSE Bug 901239
- SUSE Bug 901242
- SUSE Bug 901246
- SUSE Bug 904889
Описание
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.
Затронутые продукты
Ссылки
- CVE-2014-6457
- SUSE Bug 901239
- SUSE Bug 901242
- SUSE Bug 901246
- SUSE Bug 904889
Описание
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2014-6458
- SUSE Bug 901239
- SUSE Bug 901242
- SUSE Bug 901246
- SUSE Bug 904889
Описание
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Internet Explorer, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2014-6466
- SUSE Bug 901239
- SUSE Bug 901242
- SUSE Bug 901246
- SUSE Bug 904889
Описание
Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-6527.
Затронутые продукты
Ссылки
- CVE-2014-6476
- SUSE Bug 901239
- SUSE Bug 901242
- SUSE Bug 901246
- SUSE Bug 904889
Описание
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Firefox, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2014-6492
- SUSE Bug 901239
- SUSE Bug 901242
- SUSE Bug 901246
- SUSE Bug 904889
Описание
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532.
Затронутые продукты
Ссылки
- CVE-2014-6493
- SUSE Bug 901239
- SUSE Bug 901242
- SUSE Bug 901246
- SUSE Bug 904889
Описание
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknown vectors related to Libraries.
Затронутые продукты
Ссылки
- CVE-2014-6502
- SUSE Bug 901239
- SUSE Bug 901242
- SUSE Bug 901246
- SUSE Bug 904889
Описание
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532.
Затронутые продукты
Ссылки
- CVE-2014-6503
- SUSE Bug 901239
- SUSE Bug 901242
- SUSE Bug 901246
- SUSE Bug 904889
Описание
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Затронутые продукты
Ссылки
- CVE-2014-6506
- SUSE Bug 901239
- SUSE Bug 901242
- SUSE Bug 901246
- SUSE Bug 904889
Описание
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
Затронутые продукты
Ссылки
- CVE-2014-6511
- SUSE Bug 901239
- SUSE Bug 901242
- SUSE Bug 901246
- SUSE Bug 904889
Описание
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Libraries.
Затронутые продукты
Ссылки
- CVE-2014-6512
- SUSE Bug 901239
- SUSE Bug 901242
- SUSE Bug 901246
- SUSE Bug 904889
Описание
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
Затронутые продукты
Ссылки
- CVE-2014-6513
- SUSE Bug 901239
- SUSE Bug 901242
- SUSE Bug 901246
- SUSE Bug 904889
Описание
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect integrity via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2014-6515
- SUSE Bug 901239
- SUSE Bug 901242
- SUSE Bug 901246
- SUSE Bug 904889
Описание
Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-6476.
Затронутые продукты
Ссылки
- CVE-2014-6527
- SUSE Bug 901239
- SUSE Bug 901242
- SUSE Bug 901246
- SUSE Bug 904889
Описание
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality via unknown vectors related to Libraries.
Затронутые продукты
Ссылки
- CVE-2014-6531
- SUSE Bug 901239
- SUSE Bug 901242
- SUSE Bug 901246
- SUSE Bug 904889
Описание
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503.
Затронутые продукты
Ссылки
- CVE-2014-6532
- SUSE Bug 901239
- SUSE Bug 901242
- SUSE Bug 901246
- SUSE Bug 904889
Описание
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Security.
Затронутые продукты
Ссылки
- CVE-2014-6558
- SUSE Bug 901239
- SUSE Bug 901242
- SUSE Bug 901246
- SUSE Bug 904889
Описание
Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to escape the Java sandbox and execute arbitrary code via unspecified vectors related to the security manager.
Затронутые продукты
Ссылки
- CVE-2014-8891
- SUSE Bug 916266
Описание
Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to bypass intended access permissions and obtain sensitive information via unspecified vectors related to the security manager.
Затронутые продукты
Ссылки
- CVE-2014-8892
- SUSE Bug 916265
Описание
GSKit in IBM Tivoli Directory Server (ITDS) 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-ISS-ITDS-IF0042, and 6.3 before 6.3.0.35-ISS-ITDS-IF0035 and IBM Security Directory Server (ISDS) 6.3.1 before 6.3.1.9-ISS-ISDS-IF0009 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204.
Затронутые продукты
Ссылки
- CVE-2015-0138
- SUSE Bug 952088
Описание
Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to gain privileges via unknown vectors related to the Java Virtual Machine.
Затронутые продукты
Ссылки
- CVE-2015-0192
- SUSE Bug 952088
Описание
The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the "FREAK" issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.
Затронутые продукты
Ссылки
- CVE-2015-0204
- SUSE Bug 912014
- SUSE Bug 920482
- SUSE Bug 920484
- SUSE Bug 927591
- SUSE Bug 927623
- SUSE Bug 936787
- SUSE Bug 952088
Описание
Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Затронутые продукты
Ссылки
- CVE-2015-0458
- SUSE Bug 927591
Описание
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0491.
Затронутые продукты
Ссылки
- CVE-2015-0459
- SUSE Bug 927591
- SUSE Bug 932310
Описание
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Затронутые продукты
Ссылки
- CVE-2015-0469
- SUSE Bug 927591
- SUSE Bug 932310
Описание
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity via unknown vectors related to Beans.
Затронутые продукты
Ссылки
- CVE-2015-0477
- SUSE Bug 927591
Описание
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect confidentiality via vectors related to JCE.
Затронутые продукты
Ссылки
- CVE-2015-0478
- SUSE Bug 927591
- SUSE Bug 944456
Описание
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity and availability via unknown vectors related to Tools.
Затронутые продукты
Ссылки
- CVE-2015-0480
- SUSE Bug 927591
Описание
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect availability via vectors related to JSSE.
Затронутые продукты
Ссылки
- CVE-2015-0488
- SUSE Bug 927591
Описание
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0459.
Затронутые продукты
Ссылки
- CVE-2015-0491
- SUSE Bug 927591
- SUSE Bug 932310
Описание
IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass "permission checks" and obtain sensitive information via vectors related to the Java Virtual Machine.
Затронутые продукты
Ссылки
- CVE-2015-1914
- SUSE Bug 952088
Описание
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.
Затронутые продукты
Ссылки
- CVE-2015-2808
- SUSE Bug 925378
- SUSE Bug 938248
- SUSE Bug 938895
- SUSE Bug 952088