Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2319-1
HistoryAug 20, 2014 - 12:00 a.m.

OpenJDK 7 vulnerabilities

2014-08-2000:00:00
ubuntu.com
54

5.7 Medium

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.567 Medium

EPSS

Percentile

97.7%

JSON

Releases

  • Ubuntu 14.04 ESM

Packages

  • openjdk-7 - Open Source Java implementation

Details

Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure, data integrity and availability. An attacker could
exploit these to cause a denial of service or expose sensitive data over
the network. (CVE-2014-2483, CVE-2014-2490, CVE-2014-4216, CVE-2014-4219,
CVE-2014-4223, CVE-2014-4262)

Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure and data integrity. An attacker could exploit these
to expose sensitive data over the network. (CVE-2014-4209, CVE-2014-4244,
CVE-2014-4263)

Two vulnerabilities were discovered in the OpenJDK JRE related to data
integrity. (CVE-2014-4218, CVE-2014-4266)

A vulnerability was discovered in the OpenJDK JRE related to availability.
An attacker could exploit this to cause a denial of service.
(CVE-2014-4264)

Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure. An attacker could exploit these to expose sensitive
data over the network. (CVE-2014-4221, CVE-2014-4252, CVE-2014-4268)

OSVersionArchitecturePackageVersionFilename
Ubuntu14.04noarchicedtea-7-jre-jamvm< 7u65-2.5.1-4ubuntu1~0.14.04.1UNKNOWN
Ubuntu14.04noarchopenjdk-7-dbg< 7u65-2.5.1-4ubuntu1~0.14.04.1UNKNOWN
Ubuntu14.04noarchopenjdk-7-demo< 7u65-2.5.1-4ubuntu1~0.14.04.1UNKNOWN
Ubuntu14.04noarchopenjdk-7-jdk< 7u65-2.5.1-4ubuntu1~0.14.04.1UNKNOWN
Ubuntu14.04noarchopenjdk-7-jre< 7u65-2.5.1-4ubuntu1~0.14.04.1UNKNOWN
Ubuntu14.04noarchopenjdk-7-jre-headless< 7u65-2.5.1-4ubuntu1~0.14.04.1UNKNOWN
Ubuntu14.04noarchopenjdk-7-jre-zero< 7u65-2.5.1-4ubuntu1~0.14.04.1UNKNOWN
Ubuntu14.04noarchopenjdk-7-jre-lib< 7u65-2.5.1-4ubuntu1~0.14.04.1UNKNOWN

Related

nessus 41
debian 3
ubuntu 3
openvas 36
centos 3
mageia 1
redhat 9
oraclelinux 3
amazon 2
kaspersky 1
ibm 49
suse 4
aix 1
osv 1
cve 11
ubuntucve 11
prion 11
zdi 1
veracode 7
checkpoint_advisories 1
nessus
nessus
Debian DSA-2987-1 : openjdk-7 - security update
2014-07-26 00:00:00
Ubuntu 14.04 LTS : OpenJDK 7 update (USN-2319-3)
2014-09-17 00:00:00
Ubuntu 14.04 LTS : OpenJDK 7 vulnerabilities (USN-2319-1)
2014-08-20 00:00:00
debian
debian
[SECURITY] [DSA 2987-1] openjdk-7 security update
2014-07-23 19:51:31
[SECURITY] [DSA 2980-1] openjdk-6 security update
2014-07-17 15:59:57
[SECURITY] [DLA 96-1] openjdk-6 security update
2014-11-28 10:25:51
ubuntu
ubuntu
OpenJDK 7 update
2014-09-17 00:00:00
OpenJDK 7 regression
2014-08-26 00:00:00
OpenJDK 6 vulnerabilities
2014-08-12 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2319-1)
2014-08-20 00:00:00
Ubuntu: Security Advisory (USN-2319-3)
2014-09-17 00:00:00
Debian: Security Advisory (DSA-2987-1)
2014-07-22 00:00:00
centos
centos
java security update
2014-07-16 10:46:11
java security update
2014-07-16 10:53:36
java security update
2014-07-21 18:20:14
mageia
mageia
Updated java-1.7.0-openjdk packages fix multiple vulnerabilities
2014-07-26 15:03:50
redhat
redhat
(RHSA-2014:0890) Important: java-1.7.0-openjdk security update
2014-07-16 00:00:00
(RHSA-2014:0889) Critical: java-1.7.0-openjdk security update
2014-07-16 00:00:00
(RHSA-2014:0907) Important: java-1.6.0-openjdk security and bug fix update
2014-07-21 00:00:00
oraclelinux
oraclelinux
java-1.7.0-openjdk security update
2014-07-16 00:00:00
java-1.7.0-openjdk security update
2014-07-16 00:00:00
java-1.6.0-openjdk security and bug fix update
2014-07-21 00:00:00
amazon
amazon
Critical: java-1.7.0-openjdk
2014-07-23 14:01:00
Important: java-1.6.0-openjdk
2014-07-31 13:52:00
kaspersky
kaspersky
KLA10507 Multiple vulnerabilities in Oracle products
2014-07-17 00:00:00
ibm
ibm
Security Bulletin: July 2014 Java Runtime Environment (JRE) Vulnerabilities in Multiple N series Products
2018-06-18 00:32:15
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Support Assistant Team Server July 2014 CPU
2018-06-15 07:01:18
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect WebSphere Application Server July 2014 CPU
2018-06-15 07:01:12
suse
suse
Security update for openjdk (important)
2014-08-04 19:04:23
Security update for java-1_5_0-ibm (important)
2015-02-25 19:05:32
Security update for java-1_7_0-ibm (important)
2015-02-21 01:05:45
aix
aix
Multiple vulnerabilities in current releases of the IBM SDK Java Technology Edition
2014-08-18 14:04:26
osv
osv
openjdk-6 - security update
2014-11-28 00:00:00
cve
cve
CVE-2014-4223
2014-07-17 05:10:00
CVE-2014-2483
2014-07-17 05:10:00
CVE-2014-4264
2014-07-17 11:17:00
ubuntucve
ubuntucve
CVE-2014-4223
2014-07-17 00:00:00
CVE-2014-2483
2014-07-17 00:00:00
CVE-2014-4268
2014-07-17 00:00:00
prion
prion
Design/Logic Flaw
2014-07-17 05:10:00
Buffer overflow
2014-07-17 05:10:00
Design/Logic Flaw
2014-07-17 11:17:00
zdi
zdi
Oracle Java ResourceBundle Format String Remote Code Execution Vulnerability
2014-07-18 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-01-15 08:56:47
Authentication Bypass
2019-05-02 05:03:23
Unchecked Return Value
2019-05-02 05:03:23
checkpoint_advisories
checkpoint_advisories
Oracle Java AtomicReferenceFieldUpdater Type Confusion (CVE-2014-4262)
2014-09-21 00:00:00

5.7 Medium

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.567 Medium

EPSS

Percentile

97.7%

JSON
Related for USN-2319-1
nessus41debian3ubuntu3openvas36centos3mageia1redhat9oraclelinux3amazon2kaspersky1ibm49suse4aix1osv1cve11ubuntucve11prion11zdi1veracode7checkpoint_advisories1