CVE-2013-0427
8.1 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.012 Low
EPSS
Percentile
85.1%
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect integrity via unknown vectors related to Libraries. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to interrupt certain threads that should not be interrupted.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| oracle:jre | oracle jre | eq | 1.7.0 |
References
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907455
icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS
icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/87d135824bdf
lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html
lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html
marc.info/?l=bugtraq&m=136439120408139&w=2
marc.info/?l=bugtraq&m=136570436423916&w=2
marc.info/?l=bugtraq&m=136733161405818&w=2
rhn.redhat.com/errata/RHSA-2013-0236.html
rhn.redhat.com/errata/RHSA-2013-0237.html
rhn.redhat.com/errata/RHSA-2013-0245.html
rhn.redhat.com/errata/RHSA-2013-0246.html
rhn.redhat.com/errata/RHSA-2013-0247.html
rhn.redhat.com/errata/RHSA-2013-1455.html
rhn.redhat.com/errata/RHSA-2013-1456.html
security.gentoo.org/glsa/glsa-201406-32.xml
www.kb.cert.org/vuls/id/858729
www.mandriva.com/security/advisories?name=MDVSA-2013:095
www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html
www.securityfocus.com/bid/57724
www.us-cert.gov/cas/techalerts/TA13-032A.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16013
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18641
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19245
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19488
wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056
Related
8.1 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.012 Low
EPSS
Percentile
85.1%