IcedTea JDK: Multiple vulnerabilities

Background IcedTea is a distribution of the Java OpenJDK source code built with free build tools. Description Multiple vulnerabilities have been discovered in the IcedTea JDK. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly execute arbitrary...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:0377-1)

java-170-openjdk was updated to icedtea-2.3.6 bnc803379 containing various security and bugfixes : - Security fixes - S6563318, CVE-2013-0424: RMI data sanitization - S6664509, CVE-2013-0425: Add logging context - S6664528, CVE-2013-0426: Find log level matching its name or value given at...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2013:0777-1)

java-160-openjdk was updated to 1.12.5 bnc817157 - Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization - S8001031, CVE-2013-2419: Better font processing - S8001040, CVE-2013-1537: Rework...

SOL15315 - Java Open JDK vulnerability CVE-2014-0429

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents. SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

IBM WebSphere Application Server 8.5 < Fix Pack 8.5.5.2 Multiple Vulnerabilities

IBM WebSphere Application Server 8.5 prior to Fix Pack 8.5.5.2 appears to be running on the remote host and is, therefore, potentially affected by the following vulnerabilities : - Numerous errors exist related to the included IBM SDK for Java based on the Oracle JDK that could allow denial of...

OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries...

PT-2014-1235

Name of the Vulnerable Software and Affected Versions Java Development Kit affected versions not specified Java Runtime Environment affected versions not specified canonical ubuntu linux affected versions not specified oracle jdk affected versions not specified oracle jre affected versions not...

PT-2014-1262

Name of the Vulnerable Software and Affected Versions Java Runtime Environment affected versions not specified Java Development Kit affected versions not specified Oracle JDK affected versions not specified Oracle JRE affected versions not specified Canonical Ubuntu Linux affected versions not...

GLSA-201401-30 : Oracle JRE/JDK: Multiple vulnerabilities (ROBOT)

The remote host is affected by the vulnerability described in GLSA-201401-30 Oracle JRE/JDK: Multiple vulnerabilities Multiple vulnerabilities have been reported in the Oracle Java implementation. Please review the CVE identifiers referenced below for details. Impact : An unauthenticated, remote...

Oracle JRE/JDK: Multiple vulnerabilities

Background The Oracle Java Development Kit JDK formerly known as Sun JDK and the Oracle Java Runtime Environment JRE formerly known as Sun JRE provide the Oracle Java platform formerly known as Sun Java Platform. Description Multiple vulnerabilities have been reported in the Oracle Java...

Oracle Java SE远程安全漏洞

BUGTRAQ ID: 64912 CVECAN ID: CVE-2013-5898 Java SE 是基于JDK和JRE的Java平台标准版的简称，用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。 Java SE 6u65, Java SE 7u45版本在实现上存在远程安全漏洞，未经身份验证的远程攻击者可利用此漏洞影响受影响组件的机密性、完整性。 0 Oracle Java SE 7u45 厂商补丁： Oracle ------ Oracle已经为此发布了一个安全公告（cpujan2014-1972949）以及相应补丁:...

RHEL 5 / 6 : java-1.7.0-oracle (RHSA-2014:0030)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0030 advisory. Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This update fixes...

PT-2014-2992

Name of the Vulnerable Software and Affected Versions Oracle JDK, Oracle JRE affected versions not specified Description The issue concerns a problem in Oracle JDK and Oracle JRE. No specific details about the nature of the issue, affected devices, or real-world incidents are provided...

Oracle Java SE Multiple Vulnerabilities (January 2014 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is earlier than 7 Update 51, 6 Update 71, or 5 Update 61. It is, therefore, potentially affected by security issues in the following components : - 2D - Beans - CORBA - Deployment - Hotspot - Install - JA...

PT-2014-1273

Name of the Vulnerable Software and Affected Versions Java Development Kit affected versions not specified Java Runtime Environment affected versions not specified Oracle JDK affected versions not specified Oracle JRE affected versions not specified Description The issue allows a remote attacker ...

PT-2014-1225

Name of the Vulnerable Software and Affected Versions Java Runtime Environment affected versions not specified Java Development Kit affected versions not specified Oracle JDK affected versions not specified Oracle JRE affected versions not specified Description The issue is related to a component...

OpenJDK: Resource denial of service (AWT, 8001038)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the...

OpenJDK: default keytab path information leak (JGSS, 8022931)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JGSS...

OpenJDK: RMIConnection stub missing permission check (CORBA, 8011157)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA...

OpenJDK: javac does not ignore certain ignorable characters (Javadoc, 8016653)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, and JRockit R27.7.6 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Javadoc...