Lucene search

K
ubuntuUbuntuUSN-1724-1
HistoryFeb 14, 2013 - 12:00 a.m.

OpenJDK vulnerabilities

2013-02-1400:00:00
ubuntu.com
43

7.3 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.093 Low

EPSS

Percentile

94.6%

Releases

  • Ubuntu 12.10
  • Ubuntu 12.04
  • Ubuntu 11.10
  • Ubuntu 10.04

Packages

  • openjdk-6 - Open Source Java implementation
  • openjdk-7 - Open Source Java implementation

Details

Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure and data integrity. An attacker could exploit these
to cause a denial of service. (CVE-2012-1541, CVE-2012-3342, CVE-2013-0351,
CVE-2013-0419, CVE-2013-0423, CVE-2013-0446, CVE-2012-3213, CVE-2013-0425,
CVE-2013-0426, CVE-2013-0428, CVE-2013-0429, CVE-2013-0430, CVE-2013-0441,
CVE-2013-0442, CVE-2013-0445, CVE-2013-0450, CVE-2013-1475, CVE-2013-1476,
CVE-2013-1478, CVE-2013-1480)

Vulnerabilities were discovered in the OpenJDK JRE related to information
disclosure. (CVE-2013-0409, CVE-2013-0434, CVE-2013-0438)

Several data integrity vulnerabilities were discovered in the OpenJDK JRE.
(CVE-2013-0424, CVE-2013-0427, CVE-2013-0433, CVE-2013-1473)

Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure and data integrity. (CVE-2013-0432, CVE-2013-0435,
CVE-2013-0443)

A vulnerability was discovered in the OpenJDK JRE related to availability.
An attacker could exploit this to cause a denial of service.
(CVE-2013-0440)

A vulnerability was discovered in the OpenJDK JRE related to information
disclosure and data integrity. An attacker could exploit this to cause a
denial of service. This issue only affected Ubuntu 12.10. (CVE-2013-0444)

A data integrity vulnerability was discovered in the OpenJDK JRE. This
issue only affected Ubuntu 12.10. (CVE-2013-0448)

An information disclosure vulnerability was discovered in the OpenJDK JRE.
This issue only affected Ubuntu 12.10. (CVE-2013-0449)

A vulnerability was discovered in the OpenJDK JRE related to information
disclosure and data integrity. An attacker could exploit this to cause a
denial of service. This issue did not affect Ubuntu 12.10. (CVE-2013-1481)

OSVersionArchitecturePackageVersionFilename
Ubuntu12.10noarchopenjdk-7-jre-lib< 7u13-2.3.6-0ubuntu0.12.10.1UNKNOWN
Ubuntu12.10noarchicedtea-7-jre-jamvm< 7u13-2.3.6-0ubuntu0.12.10.1UNKNOWN
Ubuntu12.10noarchopenjdk-7-dbg< 7u13-2.3.6-0ubuntu0.12.10.1UNKNOWN
Ubuntu12.10noarchopenjdk-7-demo< 7u13-2.3.6-0ubuntu0.12.10.1UNKNOWN
Ubuntu12.10noarchopenjdk-7-jdk< 7u13-2.3.6-0ubuntu0.12.10.1UNKNOWN
Ubuntu12.10noarchopenjdk-7-jre< 7u13-2.3.6-0ubuntu0.12.10.1UNKNOWN
Ubuntu12.10noarchopenjdk-7-jre-headless< 7u13-2.3.6-0ubuntu0.12.10.1UNKNOWN
Ubuntu12.10noarchopenjdk-7-jre-zero< 7u13-2.3.6-0ubuntu0.12.10.1UNKNOWN
Ubuntu12.04noarchicedtea-6-jre-cacao< 6b27-1.12.1-2ubuntu0.12.04.2UNKNOWN
Ubuntu12.04noarchicedtea-6-jre-jamvm< 6b27-1.12.1-2ubuntu0.12.04.2UNKNOWN
Rows per page:
1-10 of 341

References

7.3 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.093 Low

EPSS

Percentile

94.6%