10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.2 High
AI Score
Confidence
Low
0.917 High
EPSS
Percentile
98.9%
Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure, data integrity and availability. An attacker could
exploit these to cause a denial of service or expose sensitive data over
the network. (CVE-2014-0429, CVE-2014-0446, CVE-2014-0451, CVE-2014-0452,
CVE-2014-0454, CVE-2014-0455, CVE-2014-0456, CVE-2014-0457, CVE-2014-0458,
CVE-2014-0461, CVE-2014-2397, CVE-2014-2402, CVE-2014-2412, CVE-2014-2414,
CVE-2014-2421, CVE-2014-2423, CVE-2014-2427)
Two vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure and data integrity. An attacker could exploit these
to expose sensitive data over the network. (CVE-2014-0453, CVE-2014-0460)
A vulnerability was discovered in the OpenJDK JRE related to availability.
An attacker could exploit this to cause a denial of service.
(CVE-2014-0459)
Jakub Wilk discovered that the OpenJDK JRE incorrectly handled temporary
files. A local attacker could possibly use this issue to overwrite
arbitrary files. In the default installation of Ubuntu, this should be
prevented by the Yama link restrictions. (CVE-2014-1876)
Two vulnerabilities were discovered in the OpenJDK JRE related to data
integrity. (CVE-2014-2398, CVE-2014-2413)
A vulnerability was discovered in the OpenJDK JRE related to information
disclosure. An attacker could exploit this to expose sensitive data over
the network. (CVE-2014-2403)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 14.04 | noarch | icedtea-7-jre-jamvm | < 7u55-2.4.7-1ubuntu1 | UNKNOWN |
Ubuntu | 14.04 | noarch | openjdk-7-dbg | < 7u55-2.4.7-1ubuntu1 | UNKNOWN |
Ubuntu | 14.04 | noarch | openjdk-7-demo | < 7u55-2.4.7-1ubuntu1 | UNKNOWN |
Ubuntu | 14.04 | noarch | openjdk-7-jdk | < 7u55-2.4.7-1ubuntu1 | UNKNOWN |
Ubuntu | 14.04 | noarch | openjdk-7-jre | < 7u55-2.4.7-1ubuntu1 | UNKNOWN |
Ubuntu | 14.04 | noarch | openjdk-7-jre-headless | < 7u55-2.4.7-1ubuntu1 | UNKNOWN |
Ubuntu | 14.04 | noarch | openjdk-7-jre-zero | < 7u55-2.4.7-1ubuntu1 | UNKNOWN |
Ubuntu | 14.04 | noarch | openjdk-7-jre-lib | < 7u55-2.4.7-1ubuntu1 | UNKNOWN |
Ubuntu | 13.10 | noarch | icedtea-7-jre-jamvm | < 7u55-2.4.7-1ubuntu1~0.13.10.1 | UNKNOWN |
Ubuntu | 13.10 | noarch | openjdk-7-dbg | < 7u55-2.4.7-1ubuntu1~0.13.10.1 | UNKNOWN |
launchpad.net/bugs/1283828
ubuntu.com/security/CVE-2014-0429
ubuntu.com/security/CVE-2014-0446
ubuntu.com/security/CVE-2014-0451
ubuntu.com/security/CVE-2014-0452
ubuntu.com/security/CVE-2014-0453
ubuntu.com/security/CVE-2014-0454
ubuntu.com/security/CVE-2014-0455
ubuntu.com/security/CVE-2014-0456
ubuntu.com/security/CVE-2014-0457
ubuntu.com/security/CVE-2014-0458
ubuntu.com/security/CVE-2014-0459
ubuntu.com/security/CVE-2014-0460
ubuntu.com/security/CVE-2014-0461
ubuntu.com/security/CVE-2014-1876
ubuntu.com/security/CVE-2014-2397
ubuntu.com/security/CVE-2014-2398
ubuntu.com/security/CVE-2014-2402
ubuntu.com/security/CVE-2014-2403
ubuntu.com/security/CVE-2014-2412
ubuntu.com/security/CVE-2014-2413
ubuntu.com/security/CVE-2014-2414
ubuntu.com/security/CVE-2014-2421
ubuntu.com/security/CVE-2014-2423
ubuntu.com/security/CVE-2014-2427