The vulnerability of the Java Runtime Environment software platform arises from operations that go beyond the buffer boundaries in memory, allowing attackers to compromise the integrity of the runtime environment or disable the security monitor.

🗓️ 27 Jun 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Java Runtime Environment vulnerability from memory buffer overrun enabling attackers to compromise integrity.

Reporter	Title	Published	Views	Family All 116
IBM Security Bulletins	Security Bulletin: WebSphere Application Server - IBM SDK for Java April 2013 CPU	26 Sep 202205:45	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server Community Edition 3.0.0.3 Oracle CPU April 2013	25 Sep 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: Tivoli Storage Productivity Center - Oracle CPU February 2013, April 2013	19 Aug 202218:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Lombardi Edition – Information regarding security vulnerability in IBM SDK for Java that shipped with IBM WebSphere Application Server and addressed by Oracle CPU April 2013 (CVE-2013-0169)	25 Sep 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Business Services Fabric – Information regarding a security vulnerability in IBM SDK for Java that shipped with IBM WebSphere Application Server and addressed by Oracle CPU April 2013 (CVE-2013-0169)	25 Sep 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: Information regarding security vulnerability in IBM SDK for Java that is shipped with IBM WebSphere Application Server and addressed by Oracle CPU April 2013 (CVE-2013-0169)	25 Sep 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Intelligent Operations Center 1.5 WebSphere Application Server - Oracle Java CPU April 2013	25 Sep 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Rational Functional Tester versions 8.x due to security vulnerabilities in IBM JRE 7.0 Service Release 4 Fix Pack 1 or earlier, and non-IBM Java 7.0	29 Sep 201820:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager and WebSphere ILOG JRules: Multiple security vulnerabilities in IBM JRE	25 Sep 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Smart Analytics System 5600 is affected by vulnerabilities in the IBM Java SDK	25 Sep 202221:06	–	ibm

Vulners

Node

red_hat red_hat_enterprise_linux_serverMatch6

OR

canonical ubuntuMatch12.10

OR

red_hat red_hat_enterprise_linux_workstationMatch6.0

Source	Link
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-2423
oracle	www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html
ubuntu	www.ubuntu.com/usn/USN-1806-1
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

24 Sep 2024 00:00Current

7High risk

Vulners AI Score7

CVSS 24.3

CVSS 35.3

EPSS0.85333

java runtime environment memory buffer overrun remote attacker system integrity