10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.106 Low
EPSS
Percentile
95.0%
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60
and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and
earlier allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to 2D, a different vulnerability
than CVE-2013-5829.
Author | Note |
---|---|
jdstrand | no 2.3 update as of 2013/12/20. 2.4/armhf needs to be fixed |
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 10.04 | noarch | openjdk-6 | < 6b27-1.12.6-1ubuntu0.10.04.3 | UNKNOWN |
ubuntu | 12.04 | noarch | openjdk-6 | < 6b27-1.12.6-1ubuntu0.12.04.3 | UNKNOWN |
ubuntu | 12.10 | noarch | openjdk-6 | < 6b27-1.12.6-1ubuntu0.12.10.4 | UNKNOWN |
ubuntu | 13.04 | noarch | openjdk-6 | < 6b27-1.12.6-1ubuntu0.13.04.4 | UNKNOWN |
ubuntu | 13.10 | noarch | openjdk-6 | < 6b27-1.12.6-1ubuntu2.1 | UNKNOWN |
ubuntu | 12.04 | noarch | openjdk-7 | < 7u51-2.4.4-0ubuntu0.12.04.2 | UNKNOWN |
ubuntu | 12.10 | noarch | openjdk-7 | < 7u51-2.4.4-0ubuntu0.12.10.2 | UNKNOWN |
ubuntu | 13.04 | noarch | openjdk-7 | < 7u51-2.4.4-0ubuntu0.13.04.2 | UNKNOWN |
ubuntu | 13.10 | noarch | openjdk-7 | < 7u51-2.4.4-0ubuntu0.13.10.1 | UNKNOWN |
www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
launchpad.net/bugs/cve/CVE-2013-5809
nvd.nist.gov/vuln/detail/CVE-2013-5809
security-tracker.debian.org/tracker/CVE-2013-5809
ubuntu.com/security/notices/USN-2033-1
ubuntu.com/security/notices/USN-2089-1
www.cve.org/CVERecord?id=CVE-2013-5809