Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2312-1
HistoryAug 12, 2014 - 12:00 a.m.

OpenJDK 6 vulnerabilities

2014-08-1200:00:00
ubuntu.com
44

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

5.8

Confidence

Low

EPSS

0.491

Percentile

97.5%

JSON

Releases

  • Ubuntu 12.04
  • Ubuntu 10.04

Packages

  • openjdk-6 - Open Source Java implementation

Details

Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure, data integrity and availability. An attacker could
exploit these to cause a denial of service or expose sensitive data over
the network. (CVE-2014-2490, CVE-2014-4216, CVE-2014-4219, CVE-2014-4262)

Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure and data integrity. An attacker could exploit these
to expose sensitive data over the network. (CVE-2014-4209, CVE-2014-4244,
CVE-2014-4263)

Two vulnerabilities were discovered in the OpenJDK JRE related to data
integrity. (CVE-2014-4218, CVE-2014-4266)

Two vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure. An attacker could exploit these to expose sensitive
data over the network. (CVE-2014-4252, CVE-2014-4268)

OSVersionArchitecturePackageVersionFilename
Ubuntu12.04noarchicedtea-6-jre-cacao< 6b32-1.13.4-4ubuntu0.12.04.2UNKNOWN
Ubuntu12.04noarchicedtea-6-jre-jamvm< 6b32-1.13.4-4ubuntu0.12.04.2UNKNOWN
Ubuntu12.04noarchopenjdk-6-dbg< 6b32-1.13.4-4ubuntu0.12.04.2UNKNOWN
Ubuntu12.04noarchopenjdk-6-demo< 6b32-1.13.4-4ubuntu0.12.04.2UNKNOWN
Ubuntu12.04noarchopenjdk-6-jdk< 6b32-1.13.4-4ubuntu0.12.04.2UNKNOWN
Ubuntu12.04noarchopenjdk-6-jre< 6b32-1.13.4-4ubuntu0.12.04.2UNKNOWN
Ubuntu12.04noarchopenjdk-6-jre-headless< 6b32-1.13.4-4ubuntu0.12.04.2UNKNOWN
Ubuntu12.04noarchopenjdk-6-jre-zero< 6b32-1.13.4-4ubuntu0.12.04.2UNKNOWN
Ubuntu12.04noarchopenjdk-6-jre-lib< 6b32-1.13.4-4ubuntu0.12.04.2UNKNOWN
Ubuntu10.04noarchopenjdk-6-jre-headless< 6b32-1.13.4-4ubuntu0.10.04.2UNKNOWN
Rows per page:
1-10 of 171

Related

nessus 41
openvas 30
oraclelinux 3
amazon 2
redhat 9
debian 3
centos 3
mageia 1
ubuntu 3
ibm 49
aix 1
suse 3
kaspersky 1
osv 1
ubuntucve 8
prion 8
nvd 8
cvelist 8
veracode 7
cve 7
zdi 1
checkpoint_advisories 2
nessus
nessus
Debian DSA-2980-1 : openjdk-6 - security update
2014-07-23 00:00:00
RHEL 5 / 6 / 7 : java-1.6.0-openjdk (RHSA-2014:0907)
2014-07-22 00:00:00
Oracle Linux 5 / 6 / 7 : java-1.6.0-openjdk (ELSA-2014-0907)
2014-07-22 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2980-1)
2014-07-16 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-387)
2015-09-08 00:00:00
CentOS Update for java CESA-2014:0907 centos5
2014-07-28 00:00:00
oraclelinux
oraclelinux
java-1.6.0-openjdk security and bug fix update
2014-07-21 00:00:00
java-1.7.0-openjdk security update
2014-07-16 00:00:00
java-1.7.0-openjdk security update
2014-07-16 00:00:00
amazon
amazon
Important: java-1.6.0-openjdk
2014-07-31 13:52:00
Critical: java-1.7.0-openjdk
2014-07-23 14:01:00
redhat
redhat
(RHSA-2014:0907) Important: java-1.6.0-openjdk security and bug fix update
2014-07-21 00:00:00
(RHSA-2014:0889) Critical: java-1.7.0-openjdk security update
2014-07-16 00:00:00
(RHSA-2014:0908) Important: java-1.6.0-sun security update
2014-07-21 15:19:01
debian
debian
[SECURITY] [DSA 2980-1] openjdk-6 security update
2014-07-17 15:59:57
[SECURITY] [DSA 2987-1] openjdk-7 security update
2014-07-23 19:51:31
[SECURITY] [DLA 96-1] openjdk-6 security update
2014-11-28 10:25:51
centos
centos
java security update
2014-07-21 18:20:14
java security update
2014-07-16 10:46:11
java security update
2014-07-16 10:53:36
mageia
mageia
Updated java-1.7.0-openjdk packages fix multiple vulnerabilities
2014-07-26 15:03:50
ubuntu
ubuntu
OpenJDK 7 regression
2014-08-26 00:00:00
OpenJDK 7 vulnerabilities
2014-08-20 00:00:00
OpenJDK 7 update
2014-09-17 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in IBM Tivoli System Automation for Integrated Operations Management (Several CVE's)
2018-08-09 04:20:36
Security Bulletin: July 2014 Java Runtime Environment (JRE) Vulnerabilities in Multiple N series Products
2018-06-18 00:32:15
Security Bulletin: Multiple vulnerabilities in the IBM SDK Java™ Technology for IBM i
2019-12-18 14:26:38
aix
aix
Multiple vulnerabilities in current releases of the IBM SDK Java Technology Edition
2014-08-18 14:04:26
suse
suse
Security update for openjdk (important)
2014-08-04 19:04:23
Security update for java-1_5_0-ibm (important)
2015-02-25 19:05:32
Security update for java-1_6_0-ibm (important)
2015-02-27 19:05:34
kaspersky
kaspersky
KLA10507 Multiple vulnerabilities in Oracle products
2014-07-17 00:00:00
osv
osv
openjdk-6 - security update
2014-11-28 00:00:00
ubuntucve
ubuntucve
CVE-2014-4268
2014-07-17 00:00:00
CVE-2014-4266
2014-07-17 00:00:00
CVE-2014-2490
2014-07-17 00:00:00
prion
prion
Buffer overflow
2014-07-17 11:17:00
Buffer overflow
2014-07-17 11:17:00
Design/Logic Flaw
2014-07-17 05:10:00
nvd
nvd
CVE-2014-4266
2014-07-17 11:17:11
CVE-2014-4268
2014-07-17 11:17:11
CVE-2014-2490
2014-07-17 05:10:14
cvelist
cvelist
CVE-2014-4266
2014-07-17 10:00:00
CVE-2014-2490
2014-07-17 02:36:00
CVE-2014-4268
2014-07-17 10:00:00
veracode
veracode
Arbitrary Code Execution
2019-01-15 08:56:47
Unchecked Return Value
2019-05-02 05:03:23
Buffer Overflows
2019-05-02 05:03:23
cve
cve
CVE-2014-4266
2014-07-17 11:17:11
CVE-2014-2490
2014-07-17 05:10:14
CVE-2014-4268
2014-07-17 11:17:11
zdi
zdi
Oracle Java ResourceBundle Format String Remote Code Execution Vulnerability
2014-07-18 00:00:00
checkpoint_advisories
checkpoint_advisories
Oracle Java Generic Signature Attribute Memory Corruption (CVE-2014-4216)
2014-09-15 00:00:00
Oracle Java AtomicReferenceFieldUpdater Type Confusion (CVE-2014-4262)
2014-09-21 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

5.8

Confidence

Low

EPSS

0.491

Percentile

97.5%

JSON
Related for USN-2312-1
nessus41openvas30oraclelinux3amazon2redhat9debian3centos3mageia1ubuntu3ibm49aix1suse3kaspersky1osv1ubuntucve8prion8nvd8cvelist8veracode7cve7zdi1checkpoint_advisories2