OpenJDK 7 vulnerabilities

2013-07-1600:00:00

ubuntu.com

8.4 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.968 High

EPSS

Percentile

99.7%

JSON

Releases

Ubuntu 13.04
Ubuntu 12.10

Packages

openjdk-7 - Open Source Java implementation

Details

Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure and data integrity. An attacker could exploit these
to expose sensitive data over the network. (CVE-2013-1500, CVE-2013-2454,
CVE-2013-2458)

A vulnerability was discovered in the OpenJDK Javadoc related to data
integrity. (CVE-2013-1571)

A vulnerability was discovered in the OpenJDK JRE related to information
disclosure and availability. An attacker could exploit this to cause a
denial of service or expose sensitive data over the network.
(CVE-2013-2407)

Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure. An attacker could exploit these to expose sensitive
data over the network. (CVE-2013-2412, CVE-2013-2443, CVE-2013-2446,
CVE-2013-2447, CVE-2013-2449, CVE-2013-2452, CVE-2013-2456)

Several vulnerabilities were discovered in the OpenJDK JRE related to
availability. An attacker could exploit these to cause a denial of service.
(CVE-2013-2444, CVE-2013-2445, CVE-2013-2450)

Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure, data integrity and availability. An attacker could
exploit these to cause a denial of service or expose sensitive data over
the network. (CVE-2013-2448, CVE-2013-2451, CVE-2013-2459, CVE-2013-2460,
CVE-2013-2461, CVE-2013-2463, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470,
CVE-2013-2471, CVE-2013-2472, CVE-2013-2473)

Several vulnerabilities were discovered in the OpenJDK JRE related to data
integrity. (CVE-2013-2453, CVE-2013-2455, CVE-2013-2457)

OSVersionArchitecturePackageVersionFilename
Ubuntu13.04noarchopenjdk-7-jre-zero< 7u25-2.3.10-1ubuntu0.13.04.2UNKNOWN
Ubuntu13.04noarchicedtea-7-jre-jamvm< 7u25-2.3.10-1ubuntu0.13.04.2UNKNOWN
Ubuntu13.04noarchopenjdk-7-dbg< 7u25-2.3.10-1ubuntu0.13.04.2UNKNOWN
Ubuntu13.04noarchopenjdk-7-demo< 7u25-2.3.10-1ubuntu0.13.04.2UNKNOWN
Ubuntu13.04noarchopenjdk-7-jdk< 7u25-2.3.10-1ubuntu0.13.04.2UNKNOWN
Ubuntu13.04noarchopenjdk-7-jre< 7u25-2.3.10-1ubuntu0.13.04.2UNKNOWN
Ubuntu13.04noarchopenjdk-7-jre-headless< 7u25-2.3.10-1ubuntu0.13.04.2UNKNOWN
Ubuntu13.04noarchopenjdk-7-jre-lib< 7u25-2.3.10-1ubuntu0.13.04.2UNKNOWN
Ubuntu13.04noarchopenjdk-7-doc< 7u25-2.3.10-1ubuntu0.13.04.2UNKNOWN
Ubuntu12.10noarchopenjdk-7-jre-zero< 7u25-2.3.10-1ubuntu0.12.10.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	13.04	noarch	openjdk-7-jre-zero	< 7u25-2.3.10-1ubuntu0.13.04.2	UNKNOWN
Ubuntu	13.04	noarch	icedtea-7-jre-jamvm	< 7u25-2.3.10-1ubuntu0.13.04.2	UNKNOWN
Ubuntu	13.04	noarch	openjdk-7-dbg	< 7u25-2.3.10-1ubuntu0.13.04.2	UNKNOWN
Ubuntu	13.04	noarch	openjdk-7-demo	< 7u25-2.3.10-1ubuntu0.13.04.2	UNKNOWN
Ubuntu	13.04	noarch	openjdk-7-jdk	< 7u25-2.3.10-1ubuntu0.13.04.2	UNKNOWN
Ubuntu	13.04	noarch	openjdk-7-jre	< 7u25-2.3.10-1ubuntu0.13.04.2	UNKNOWN
Ubuntu	13.04	noarch	openjdk-7-jre-headless	< 7u25-2.3.10-1ubuntu0.13.04.2	UNKNOWN
Ubuntu	13.04	noarch	openjdk-7-jre-lib	< 7u25-2.3.10-1ubuntu0.13.04.2	UNKNOWN
Ubuntu	13.04	noarch	openjdk-7-doc	< 7u25-2.3.10-1ubuntu0.13.04.2	UNKNOWN
Ubuntu	12.10	noarch	openjdk-7-jre-zero	< 7u25-2.3.10-1ubuntu0.12.10.2	UNKNOWN