Lucene search

K
ubuntuUbuntuUSN-2089-1
HistoryJan 23, 2014 - 12:00 a.m.

OpenJDK 7 vulnerabilities

2014-01-2300:00:00
ubuntu.com
59

7.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.433 Medium

EPSS

Percentile

97.3%

Releases

  • Ubuntu 13.10
  • Ubuntu 13.04
  • Ubuntu 12.10

Packages

  • openjdk-7 - Open Source Java implementation

Details

Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure and data integrity. An attacker could exploit these
to expose sensitive data over the network. (CVE-2013-3829, CVE-2013-5783,
CVE-2013-5804, CVE-2014-0411)

Several vulnerabilities were discovered in the OpenJDK JRE related to
availability. An attacker could exploit these to cause a denial of service.
(CVE-2013-4002, CVE-2013-5803, CVE-2013-5823, CVE-2013-5825, CVE-2013-5896,
CVE-2013-5910)

Several vulnerabilities were discovered in the OpenJDK JRE related to data
integrity. (CVE-2013-5772, CVE-2013-5774, CVE-2013-5784, CVE-2013-5797,
CVE-2013-5820, CVE-2014-0376, CVE-2014-0416)

Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure. An attacker could exploit these to expose sensitive
data over the network. (CVE-2013-5778, CVE-2013-5780, CVE-2013-5790,
CVE-2013-5800, CVE-2013-5840, CVE-2013-5849, CVE-2013-5851, CVE-2013-5884,
CVE-2014-0368)

Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure, data integrity and availability. An attacker could
exploit these to cause a denial of service or expose sensitive data over
the network. (CVE-2013-5782, CVE-2013-5802, CVE-2013-5809, CVE-2013-5829,
CVE-2013-5814, CVE-2013-5817, CVE-2013-5830, CVE-2013-5842, CVE-2013-5850,
CVE-2013-5878, CVE-2013-5893, CVE-2013-5907, CVE-2014-0373, CVE-2014-0408,
CVE-2014-0422, CVE-2014-0428)

A vulnerability was discovered in the OpenJDK JRE related to information
disclosure and availability. An attacker could exploit this to expose
sensitive data over the network or cause a denial of service.
(CVE-2014-0423)

OSVersionArchitecturePackageVersionFilename
Ubuntu13.10noarchopenjdk-7-jre-lib< 7u51-2.4.4-0ubuntu0.13.10.1UNKNOWN
Ubuntu13.10noarchicedtea-7-jre-jamvm< 7u51-2.4.4-0ubuntu0.13.10.1UNKNOWN
Ubuntu13.10noarchopenjdk-7-dbg< 7u51-2.4.4-0ubuntu0.13.10.1UNKNOWN
Ubuntu13.10noarchopenjdk-7-demo< 7u51-2.4.4-0ubuntu0.13.10.1UNKNOWN
Ubuntu13.10noarchopenjdk-7-jdk< 7u51-2.4.4-0ubuntu0.13.10.1UNKNOWN
Ubuntu13.10noarchopenjdk-7-jre< 7u51-2.4.4-0ubuntu0.13.10.1UNKNOWN
Ubuntu13.10noarchopenjdk-7-jre-headless< 7u51-2.4.4-0ubuntu0.13.10.1UNKNOWN
Ubuntu13.10noarchopenjdk-7-jre-zero< 7u51-2.4.4-0ubuntu0.13.10.1UNKNOWN
Ubuntu13.04noarchopenjdk-7-jre-lib< 7u51-2.4.4-0ubuntu0.13.04.2UNKNOWN
Ubuntu13.04noarchicedtea-7-jre-jamvm< 7u51-2.4.4-0ubuntu0.13.04.2UNKNOWN
Rows per page:
1-10 of 251

References

7.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.433 Medium

EPSS

Percentile

97.3%