Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2013-2450
HistoryJun 18, 2013 - 12:00 a.m.

CVE-2013-2450

2013-06-1800:00:00
ubuntu.com
ubuntu.com
14

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.091 Low

EPSS

Percentile

94.6%

JSON

Unspecified vulnerability in the Java Runtime Environment (JRE) component
in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0
Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect
availability via unknown vectors related to Serialization. NOTE: the
previous information is from the June 2013 CPU. Oracle has not commented on
claims from another vendor that this issue is related to improper handling
of circular references in ObjectStreamClass.

Notes

Author Note
mdeslaur in lucid+, NetX and the plugin moved to the icedtea-web package
jdstrand sun-java6 is not redistributable, no longer in the archive and no longer tracked sun-java5 is EOL upstream and no longer tracked as of 2013-06-19, upstream IcedTea updates are not available updates break the icedtea-web plugin and it will need this fix: http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-June/023745.html
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchopenjdk-6< 6b27-1.12.6-1ubuntu0.10.04.1UNKNOWN
ubuntu12.04noarchopenjdk-6< 6b27-1.12.6-1ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchopenjdk-6< 6b27-1.12.6-1ubuntu0.12.10.2UNKNOWN
ubuntu13.04noarchopenjdk-6< 6b27-1.12.6-1ubuntu0.13.04.2UNKNOWN
ubuntu12.04noarchopenjdk-7< 7u25-2.3.10-1ubuntu0.12.04.2UNKNOWN
ubuntu12.10noarchopenjdk-7< 7u25-2.3.10-1ubuntu0.12.10.2UNKNOWN
ubuntu13.04noarchopenjdk-7< 7u25-2.3.10-1ubuntu0.13.04.2UNKNOWN

Related

prion 1
cve 1
veracode 11
ibm 17
suse 12
nessus 49
openvas 44
oraclelinux 3
redhat 10
centos 3
amazon 2
debian 2
mageia 2
ubuntu 3
securityvulns 1
gentoo 2
prion
prion
Design/Logic Flaw
2013-06-18 22:55:00
cve
cve
CVE-2013-2450
2013-06-18 22:55:00
veracode
veracode
Sandbox Restrictions Bypass
2019-05-02 04:45:31
Information Disclosure
2019-05-02 04:46:29
Privilege Escalation
2019-05-02 04:46:31
ibm
ibm
Security Bulletin: IBM Cognos Business Intelligence (CVE-2013-3030, CVE-2013-4002, CVE-2013-2407, CVE-2013-2450, CVE-2013-4034, CVE-2013-5372)
2018-06-15 23:04:50
Security Bulletin: Multiple vulnerabilities in IBM Cognos Express (CVE-2013-5443, CVE-2013-5445, CVE-2013-5444, CVE-2013-2407, CVE-2013-2450, CVE-2013-0169, CVE-2013-1478, CVE-2013-1480)
2022-11-10 12:06:25
Security Bulletin: Flex System Manager (FSM) – June 2013 Java Vulnerabilities
2022-05-16 16:03:13
suse
suse
Security update for IBM Java 1.4.2 (important)
2013-08-05 20:04:12
Security update for java-1_4_2-ibm (important)
2013-07-27 17:04:24
Security update for java-1_6_0-openjdk (important)
2013-07-23 22:04:14
nessus
nessus
SuSE 11.2 Security Update : java-1_4_2-ibm (SAT Patch Number 8109)
2013-07-28 00:00:00
SuSE 10 Security Update : java-1_4_2-ibm (ZYPP Patch Number 8652)
2013-07-28 00:00:00
CentOS 5 / 6 : java-1.6.0-openjdk (CESA-2013:1014)
2013-07-05 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2013:1264-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:1293-2)
2021-06-09 00:00:00
Oracle Java SE Multiple Vulnerabilities -03 June 13 (Windows)
2013-06-24 00:00:00
oraclelinux
oraclelinux
java-1.6.0-openjdk security update
2013-07-03 00:00:00
java-1.7.0-openjdk security update
2013-06-19 00:00:00
java-1.7.0-openjdk security update
2013-06-19 00:00:00
redhat
redhat
(RHSA-2013:1014) Important: java-1.6.0-openjdk security update
2013-07-03 00:00:00
(RHSA-2013:1081) Important: java-1.5.0-ibm security update
2013-07-16 00:00:00
(RHSA-2013:0957) Critical: java-1.7.0-openjdk security update
2013-06-19 00:00:00
centos
centos
java security update
2013-07-04 10:07:44
java security update
2013-06-20 06:46:44
java security update
2013-06-20 06:43:01
amazon
amazon
Important: java-1.6.0-openjdk
2013-07-12 15:31:00
Important: java-1.7.0-openjdk
2013-06-20 14:14:00
debian
debian
[SECURITY] [DSA 2727-1] openjdk-6 security update
2013-07-25 21:11:57
[SECURITY] [DSA 2722-1] openjdk-7 security update
2013-07-15 15:52:23
mageia
mageia
Updated java-1.6.0-openjdk packages fix security vulnerabilities
2013-07-16 11:26:07
Updated java-1.7.0-openjdk packages fix multiple security vulnerabilities
2013-06-26 22:13:26
ubuntu
ubuntu
IcedTea Web update
2013-07-16 00:00:00
OpenJDK 6 vulnerabilities
2013-07-23 00:00:00
OpenJDK 7 vulnerabilities
2013-07-16 00:00:00
securityvulns
securityvulns
Oracle Java multiple security vulnerabilities
2013-08-28 00:00:00
gentoo
gentoo
IcedTea JDK: Multiple vulnerabilities
2014-06-29 00:00:00
Oracle JRE/JDK: Multiple vulnerabilities
2014-01-27 00:00:00

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.091 Low

EPSS

Percentile

94.6%

JSON
Related for UB:CVE-2013-2450
prion1cve1veracode11ibm17suse12nessus49openvas44oraclelinux3redhat10centos3amazon2debian2mageia2ubuntu3securityvulns1gentoo2