Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-2420
HistoryApr 16, 2014 - 12:00 a.m.

CVE-2014-2420

2014-04-1600:00:00
ubuntu.com
ubuntu.com
14

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

EPSS

0.004

Percentile

72.0%

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE
Embedded 7u51, allows remote attackers to affect integrity via unknown
vectors related to Deployment.

Notes

Author Note
mdeslaur in lucid+, NetX and the plugin moved to the icedtea-web package
jdstrand sun-java6 is not redistributable, no longer in the archive and no longer tracked sun-java5 is EOL upstream and no longer tracked Oracle java only

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

EPSS

0.004

Percentile

72.0%