Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2388-1
HistoryOct 23, 2014 - 12:00 a.m.

OpenJDK 7 vulnerabilities

2014-10-2300:00:00
ubuntu.com
48

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

5.5 Medium

AI Score

Confidence

Low

0.034 Low

EPSS

Percentile

91.5%

JSON

Releases

  • Ubuntu 14.04 ESM

Packages

  • openjdk-7 - Open Source Java implementation

Details

A vulnerability was discovered in the OpenJDK JRE related to information
disclosure and data integrity. An attacker could exploit this to expose
sensitive data over the network. (CVE-2014-6457)

Several vulnerabilities were discovered in the OpenJDK JRE related to data
integrity. (CVE-2014-6502, CVE-2014-6512, CVE-2014-6519, CVE-2014-6527,
CVE-2014-6558)

Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure. An attacker could exploit these to expose sensitive
data over the network. (CVE-2014-6504, CVE-2014-6511, CVE-2014-6517,
CVE-2014-6531)

Two vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure, data integrity and availability. An attacker could
exploit these to cause a denial of service or expose sensitive data over
the network. (CVE-2014-6506, CVE-2014-6513)

OSVersionArchitecturePackageVersionFilename
Ubuntu14.04noarchicedtea-7-jre-jamvm< 7u71-2.5.3-0ubuntu0.14.04.1UNKNOWN
Ubuntu14.04noarchopenjdk-7-dbg< 7u71-2.5.3-0ubuntu0.14.04.1UNKNOWN
Ubuntu14.04noarchopenjdk-7-demo< 7u71-2.5.3-0ubuntu0.14.04.1UNKNOWN
Ubuntu14.04noarchopenjdk-7-jdk< 7u71-2.5.3-0ubuntu0.14.04.1UNKNOWN
Ubuntu14.04noarchopenjdk-7-jre< 7u71-2.5.3-0ubuntu0.14.04.1UNKNOWN
Ubuntu14.04noarchopenjdk-7-jre-headless< 7u71-2.5.3-0ubuntu0.14.04.1UNKNOWN
Ubuntu14.04noarchopenjdk-7-jre-zero< 7u71-2.5.3-0ubuntu0.14.04.1UNKNOWN
Ubuntu14.04noarchopenjdk-7-jre-lib< 7u71-2.5.3-0ubuntu0.14.04.1UNKNOWN

Related

openvas 41
nessus 42
ubuntu 2
suse 7
centos 4
amazon 3
osv 3
veracode 8
oraclelinux 4
redhat 11
mageia 1
debian 3
ibm 27
f5 2
kaspersky 1
aix 1
securityvulns 1
cve 6
ubuntucve 5
debiancve 9
prion 9
cvelist 5
nvd 4
openvas
openvas
Ubuntu: Security Advisory (USN-2388-2)
2014-11-11 00:00:00
Ubuntu: Security Advisory (USN-2388-1)
2014-10-23 00:00:00
Ubuntu: Security Advisory (USN-2386-1)
2014-10-17 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : OpenJDK 7 vulnerabilities (USN-2388-1)
2014-10-23 00:00:00
Ubuntu 14.10 : openjdk-7 vulnerabilities (USN-2388-2)
2014-10-24 00:00:00
Ubuntu 10.04 LTS / 12.04 LTS : openjdk-6 vulnerabilities (USN-2386-1)
2014-10-17 00:00:00
ubuntu
ubuntu
OpenJDK 7 vulnerabilities
2014-10-23 00:00:00
OpenJDK 6 vulnerabilities
2014-10-17 00:00:00
suse
suse
Security update for java-1_7_0-openjdk (important)
2014-11-13 17:04:46
Security update for java-1_7_1-ibm (important)
2014-12-03 17:04:45
Security update for IBM Java (important)
2014-12-02 19:04:43
centos
centos
java security update
2014-10-15 11:42:17
java security update
2014-10-15 12:22:05
java security update
2014-10-15 11:48:47
amazon
amazon
Important: java-1.6.0-openjdk
2014-10-16 22:15:00
Important: java-1.7.0-openjdk
2014-10-16 22:16:00
Important: java-1.8.0-openjdk
2014-10-16 22:16:00
osv
osv
openjdk-6 - security update
2014-11-26 00:00:00
openjdk-7 - security update
2014-11-29 00:00:00
openjdk-6 - security update
2014-11-28 00:00:00
veracode
veracode
Information Disclosure
2019-05-02 05:12:51
Information Disclosure
2019-05-02 05:12:50
Privilege Escalation
2019-05-02 05:12:51
oraclelinux
oraclelinux
java-1.6.0-openjdk security and bug fix update
2014-10-14 00:00:00
java-1.7.0-openjdk security and bug fix update
2014-10-15 00:00:00
java-1.7.0-openjdk security and bug fix update
2014-10-15 00:00:00
redhat
redhat
(RHSA-2014:1620) Important: java-1.7.0-openjdk security and bug fix update
2014-10-15 00:00:00
(RHSA-2014:1634) Important: java-1.6.0-openjdk security and bug fix update
2014-10-14 00:00:00
(RHSA-2014:1633) Important: java-1.7.0-openjdk security and bug fix update
2014-10-14 00:00:00
mageia
mageia
Updated java-1.7.0-openjdk packages fix security vulnerabilities
2014-10-26 00:23:09
debian
debian
[SECURITY] [DSA 3080-1] openjdk-7 security update
2014-11-29 12:43:45
[SECURITY] [DSA 3077-1] openjdk-6 security update
2014-11-26 19:10:21
[SECURITY] [DLA 96-1] openjdk-6 security update
2014-11-28 10:25:51
ibm
ibm
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Flex System Manager (FSM) (Multiple CVEs)
2019-01-31 02:10:01
Security Bulletin: October 2014 Java Runtime Environment (JRE) Vulnerabilities in Multiple N series Products
2018-06-18 00:28:10
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Security Network Protection (CVE-2014-6512, CVE-2014-6457, CVE-2014-6558, CVE-2014-3065)
2018-06-16 21:22:21
f5
f5
SOL15745 - Multiple Oracle Java vulnerabilities
2014-10-27 00:00:00
K15745 : Multiple Oracle Java vulnerabilities
2014-10-28 00:00:00
kaspersky
kaspersky
KLA10505 Multiple vulnerabilities in Oracle products
2014-10-15 00:00:00
aix
aix
Multiple vulnerabilities in current releases of the IBM SDK Java Technology Edition; issues in the Oracle October 2014 Critical Patch Update plus the POODLE SSLv3 vulnerability and
2014-11-14 15:40:48
securityvulns
securityvulns
ESA-2015-004: EMC M&amp;R &#40;Watch4Net&#41; Multiple Vulnerabilities
2015-01-25 00:00:00
cve
cve
CVE-2014-6513
2014-10-15 22:55:06
CVE-2014-6558
2014-10-15 22:55:08
CVE-2014-6517
2014-10-15 22:55:06
ubuntucve
ubuntucve
CVE-2014-6513
2014-10-15 00:00:00
CVE-2014-6558
2014-10-15 00:00:00
CVE-2014-6502
2014-10-15 00:00:00
debiancve
debiancve
CVE-2014-6513
2014-10-15 22:55:06
CVE-2014-6517
2014-10-15 22:55:06
CVE-2014-6504
2014-10-15 22:55:06
prion
prion
Design/Logic Flaw
2014-10-15 22:55:00
Design/Logic Flaw
2014-10-15 22:55:00
Buffer overflow
2014-10-15 22:55:00
cvelist
cvelist
CVE-2014-6558
2014-10-15 22:03:00
CVE-2014-6513
2014-10-15 22:03:00
CVE-2014-6504
2014-10-15 22:03:00
nvd
nvd
CVE-2014-6504
2014-10-15 22:55:06
CVE-2014-6506
2014-10-15 22:55:06
CVE-2014-6558
2014-10-15 22:55:08

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

5.5 Medium

AI Score

Confidence

Low

0.034 Low

EPSS

Percentile

91.5%

JSON
Related for USN-2388-1
openvas41nessus42ubuntu2suse7centos4amazon3osv3veracode8oraclelinux4redhat11mageia1debian3ibm27f52kaspersky1aix1securityvulns1cve6ubuntucve5debiancve9prion9cvelist5nvd4