Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2013-2456

Опубликовано: 18 июн. 2013
Источник: ubuntu
Приоритет: medium
CVSS2: 5

Описание

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class.

РелизСтатусПримечание
devel

not-affected

6b27-1.12.6-1ubuntu1
lucid

released

6b27-1.12.6-1ubuntu0.10.04.1
precise

released

6b27-1.12.6-1ubuntu0.12.04.1
quantal

released

6b27-1.12.6-1ubuntu0.12.10.2
raring

released

6b27-1.12.6-1ubuntu0.13.04.2
upstream

pending

6b27-1.12.6

Показывать по

РелизСтатусПримечание
devel

DNE

lucid

ignored

end of life
precise

DNE

quantal

DNE

raring

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

7u25-2.3.10-2ubuntu1
lucid

DNE

precise

released

7u25-2.3.10-1ubuntu0.12.04.2
quantal

released

7u25-2.3.10-1ubuntu0.12.10.2
raring

released

7u25-2.3.10-1ubuntu0.13.04.2
upstream

pending

2.3.10

Показывать по

5 Medium

CVSS2

Связанные уязвимости

redhat
около 12 лет назад

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class.

nvd
около 12 лет назад

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class.

debian
около 12 лет назад

Unspecified vulnerability in the Java Runtime Environment (JRE) compon ...

github
больше 3 лет назад

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class.

oracle-oval
около 12 лет назад

ELSA-2013-1014: java-1.6.0-openjdk security update (IMPORTANT)

5 Medium

CVSS2