OracleCVELIST:CVE-2013-2445CVE-2013-2445
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Hotspot. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to “handling of memory allocation errors.”
References
advisories.mageia.org/MGASA-2013-0185.html
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880
hg.openjdk.java.net/jdk7u/jdk7u-dev/hotspot/rev/ed3ac73a70ab
marc.info/?l=bugtraq&m=137545505800971&w=2
marc.info/?l=bugtraq&m=137545592101387&w=2
rhn.redhat.com/errata/RHSA-2013-0963.html
secunia.com/advisories/54154
security.gentoo.org/glsa/glsa-201406-32.xml
www.mandriva.com/security/advisories?name=MDVSA-2013:183
www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
www.securityfocus.com/bid/60639
www.us-cert.gov/ncas/alerts/TA13-169A
access.redhat.com/errata/RHSA-2014:0414
bugzilla.redhat.com/show_bug.cgi?id=975124
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17090
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19059
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19190
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19516
Related
