Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-5893
HistoryJan 15, 2014 - 12:00 a.m.

CVE-2013-5893

2014-01-1500:00:00
ubuntu.com
ubuntu.com
8

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.053 Low

EPSS

Percentile

92.9%

Unspecified vulnerability in Oracle Java SE 7u45 and Java SE Embedded 7u45,
and OpenJDK 7, allows remote attackers to affect confidentiality,
integrity, and availability via unknown vectors related to Libraries.
NOTE: the previous information is from the January 2014 CPU. Oracle has not
commented on third-party claims that the issue is related to improper
handling of methods in MethodHandles in HotSpot JVM, which allows attackers
to escape the sandbox.

Notes

Author Note
mdeslaur in lucid+, NetX and the plugin moved to the icedtea-web package
jdstrand sun-java6 is not redistributable, no longer in the archive and no longer tracked sun-java5 is EOL upstream and no longer tracked
OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchopenjdk-7< 7u51-2.4.4-0ubuntu0.12.04.2UNKNOWN
ubuntu12.10noarchopenjdk-7< 7u51-2.4.4-0ubuntu0.12.10.2UNKNOWN
ubuntu13.04noarchopenjdk-7< 7u51-2.4.4-0ubuntu0.13.04.2UNKNOWN
ubuntu13.10noarchopenjdk-7< 7u51-2.4.4-0ubuntu0.13.10.1UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.053 Low

EPSS

Percentile

92.9%

Related for UB:CVE-2013-5893