Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-0368
HistoryJan 15, 2014 - 12:00 a.m.

CVE-2014-0368

2014-01-1500:00:00
ubuntu.com
ubuntu.com
7

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.011 Low

EPSS

Percentile

84.2%

JSON

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and
Java SE Embedded 7u45, allows remote attackers to affect confidentiality
via unknown vectors related to Networking. NOTE: the previous information
is from the January 2014 CPU. Oracle has not commented on third-party
claims that the issue is related to incorrect permission checks when
listening on a socket, which allows attackers to escape the sandbox.

Notes

Author Note
mdeslaur in lucid+, NetX and the plugin moved to the icedtea-web package
jdstrand sun-java6 is not redistributable, no longer in the archive and no longer tracked sun-java5 is EOL upstream and no longer tracked
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchopenjdk-6< 6b30-1.13.1-1ubuntu2~0.10.04.1UNKNOWN
ubuntu12.04noarchopenjdk-6< 6b30-1.13.1-1ubuntu2~0.12.04.1UNKNOWN
ubuntu12.10noarchopenjdk-6< 6b30-1.13.1-1ubuntu2~0.12.10.1UNKNOWN
ubuntu13.10noarchopenjdk-6< 6b30-1.13.1-1ubuntu2~0.13.10.1UNKNOWN
ubuntu12.04noarchopenjdk-7< 7u51-2.4.4-0ubuntu0.12.04.2UNKNOWN
ubuntu12.10noarchopenjdk-7< 7u51-2.4.4-0ubuntu0.12.10.2UNKNOWN
ubuntu13.04noarchopenjdk-7< 7u51-2.4.4-0ubuntu0.13.04.2UNKNOWN
ubuntu13.10noarchopenjdk-7< 7u51-2.4.4-0ubuntu0.13.10.1UNKNOWN

Related

cve 1
veracode 13
prion 1
redhat 10
nessus 37
oraclelinux 3
openvas 31
amazon 2
ubuntu 3
centos 3
mageia 1
ibm 8
aix 1
suse 5
kaspersky 1
f5 2
securityvulns 1
oracle 1
gentoo 1
cve
cve
CVE-2014-0368
2014-01-15 16:08:00
veracode
veracode
Information Disclosure
2019-05-02 04:56:13
Sandbox Restrictions Bypass
2019-05-02 05:01:08
Improper Input Validation
2019-05-02 05:01:06
prion
prion
Design/Logic Flaw
2014-01-15 16:08:00
redhat
redhat
(RHSA-2014:0136) Important: java-1.5.0-ibm security update
2014-02-04 00:00:00
(RHSA-2014:0097) Important: java-1.6.0-openjdk security update
2014-01-27 00:00:00
(RHSA-2014:0026) Critical: java-1.7.0-openjdk security update
2014-01-15 00:00:00
nessus
nessus
RHEL 5 / 6 : java-1.5.0-ibm (RHSA-2014:0136)
2014-02-05 00:00:00
Ubuntu 10.04 LTS / 12.04 LTS : openjdk-6 vulnerabilities (USN-2124-1)
2014-02-28 00:00:00
Scientific Linux Security Update : java-1.6.0-openjdk on SL5.x, SL6.x i386/x86_64 (20140127)
2014-01-28 00:00:00
oraclelinux
oraclelinux
java-1.6.0-openjdk security update
2014-01-27 00:00:00
java-1.7.0-openjdk security update
2014-01-14 00:00:00
java-1.7.0-openjdk security update
2014-01-14 00:00:00
openvas
openvas
CentOS Update for java CESA-2014:0097 centos6
2014-01-30 00:00:00
RedHat Update for java-1.6.0-openjdk RHSA-2014:0097-01
2014-01-30 00:00:00
Ubuntu Update for openjdk-6 USN-2124-2
2014-04-08 00:00:00
amazon
amazon
Important: java-1.6.0-openjdk
2014-02-03 15:27:00
Critical: java-1.7.0-openjdk
2014-01-15 10:28:00
ubuntu
ubuntu
OpenJDK 6 regression
2014-04-08 00:00:00
OpenJDK 6 vulnerabilities
2014-02-27 00:00:00
OpenJDK 7 vulnerabilities
2014-01-23 00:00:00
centos
centos
java security update
2014-01-15 11:04:23
java security update
2014-01-27 22:53:27
java security update
2014-01-15 11:16:34
mageia
mageia
Updated java-1.7.0-openjdk package fixes multiple security vulnerabilities
2014-01-21 20:22:18
ibm
ibm
Security Bulletin: IBM Tivoli Composite Application Manager for Transactions affected by multiple vulnerabilities in IBM JRE (Multiple CVEs)
2018-06-17 14:41:45
Security Bulletin: Multiple vulnerabilities in current IBM SDK for Java for WebSphere Application Server January 2014 CPU
2018-06-15 06:59:28
Security Bulletin: IBM Tivoli Monitoring clients affected by vulnerabilities in IBM® SDK, Java™ Technology Edition
2018-06-17 14:41:11
aix
aix
AIX Java Multiple Vulnerabilities (Oracle Java 2014 CPU)
2014-03-06 13:24:59
suse
suse
Security update for IBM Java 6 (important)
2014-02-24 22:04:17
Security update for IBM Java 6 (important)
2014-02-20 20:04:38
Security update for IBM Java 6 (important)
2014-03-26 18:04:12
kaspersky
kaspersky
KLA10511 Multiple vulnerabilities in Oracle products
2014-01-15 00:00:00
f5
f5
K53146535 : Multiple Sun Java vulnerabilities
2015-12-31 00:00:00
SOL53146535 - Multiple Sun Java vulnerabilities
2015-12-30 00:00:00
securityvulns
securityvulns
Oracle / Sun / MySQL / PeopleSoft / OpenJDK applications multiple security vulnerabilities
2014-05-05 00:00:00
oracle
oracle
Oracle Critical Patch Update - January 2014
2014-01-14 00:00:00
gentoo
gentoo
Oracle JRE/JDK: Multiple vulnerabilities
2014-01-27 00:00:00

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.011 Low

EPSS

Percentile

84.2%

JSON
Related for UB:CVE-2014-0368
cve1veracode13prion1redhat10nessus37oraclelinux3openvas31amazon2ubuntu3centos3mageia1ibm8aix1suse5kaspersky1f52securityvulns1oracle1gentoo1