CVE-2014-2428 - Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows rem

CVE-2014-2428

Summary

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

References

Vulnerable Configurations

cpe:2.3:a:oracle:jdk:1.6.0:update_71:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update_71:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.7.0:update51:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.7.0:update51:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.6.0:update_71:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.6.0:update_71:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7.0:update_51:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7.0:update_51:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:infosphere_streams:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:infosphere_streams:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:infosphere_streams:3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:infosphere_streams:3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:infosphere_streams:3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:infosphere_streams:3.2.0:*:*:*:*:*:*:*
cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*
cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*
cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*
cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*
cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*
cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*

CVSS

Base:	7.6 (as of 08-09-2020 - 13:00)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	HIGH	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:H/Au:N/C:C/I:C/A:C

redhat via4

advisories

bugzilla

id	1088031
title	CVE-2014-2420 Oracle JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 5 is installed
oval oval:com.redhat.rhba:tst:20070331005

AND

comment java-1.7.0-oracle is earlier than 1:1.7.0.55-1jpp.2.el5_10
oval oval:com.redhat.rhsa:tst:20140413001
comment java-1.7.0-oracle is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140413002

AND

comment java-1.7.0-oracle-devel is earlier than 1:1.7.0.55-1jpp.2.el5_10
oval oval:com.redhat.rhsa:tst:20140413003
comment java-1.7.0-oracle-devel is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140413004

AND

comment java-1.7.0-oracle-javafx is earlier than 1:1.7.0.55-1jpp.2.el5_10
oval oval:com.redhat.rhsa:tst:20140413005
comment java-1.7.0-oracle-javafx is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140413006

AND

comment java-1.7.0-oracle-jdbc is earlier than 1:1.7.0.55-1jpp.2.el5_10
oval oval:com.redhat.rhsa:tst:20140413007
comment java-1.7.0-oracle-jdbc is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140413008

AND

comment java-1.7.0-oracle-plugin is earlier than 1:1.7.0.55-1jpp.2.el5_10
oval oval:com.redhat.rhsa:tst:20140413009
comment java-1.7.0-oracle-plugin is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140413010

AND

comment java-1.7.0-oracle-src is earlier than 1:1.7.0.55-1jpp.2.el5_10
oval oval:com.redhat.rhsa:tst:20140413011
comment java-1.7.0-oracle-src is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140413012

AND

comment Red Hat Enterprise Linux 6 is installed
oval oval:com.redhat.rhba:tst:20111656003

AND

comment java-1.7.0-oracle is earlier than 1:1.7.0.55-1jpp.1.el6_5
oval oval:com.redhat.rhsa:tst:20140413014
comment java-1.7.0-oracle is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413015

AND

comment java-1.7.0-oracle-devel is earlier than 1:1.7.0.55-1jpp.1.el6_5
oval oval:com.redhat.rhsa:tst:20140413016
comment java-1.7.0-oracle-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413017

AND

comment java-1.7.0-oracle-javafx is earlier than 1:1.7.0.55-1jpp.1.el6_5
oval oval:com.redhat.rhsa:tst:20140413018
comment java-1.7.0-oracle-javafx is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413019

AND

comment java-1.7.0-oracle-jdbc is earlier than 1:1.7.0.55-1jpp.1.el6_5
oval oval:com.redhat.rhsa:tst:20140413020
comment java-1.7.0-oracle-jdbc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413021

AND

comment java-1.7.0-oracle-plugin is earlier than 1:1.7.0.55-1jpp.1.el6_5
oval oval:com.redhat.rhsa:tst:20140413022
comment java-1.7.0-oracle-plugin is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413023

AND

comment java-1.7.0-oracle-src is earlier than 1:1.7.0.55-1jpp.1.el6_5
oval oval:com.redhat.rhsa:tst:20140413024
comment java-1.7.0-oracle-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140413025

rhsa

id	RHSA-2014:0413
released	2014-04-17
severity	Critical
title	RHSA-2014:0413: java-1.7.0-oracle security update (Critical)

bugzilla

id	1088031
title	CVE-2014-2420 Oracle JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 5 is installed
oval oval:com.redhat.rhba:tst:20070331005

AND

comment java-1.6.0-sun is earlier than 1:1.6.0.75-1jpp.3.el5_10
oval oval:com.redhat.rhsa:tst:20140414001
comment java-1.6.0-sun is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414002

AND

comment java-1.6.0-sun-demo is earlier than 1:1.6.0.75-1jpp.3.el5_10
oval oval:com.redhat.rhsa:tst:20140414003
comment java-1.6.0-sun-demo is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414004

AND

comment java-1.6.0-sun-devel is earlier than 1:1.6.0.75-1jpp.3.el5_10
oval oval:com.redhat.rhsa:tst:20140414005
comment java-1.6.0-sun-devel is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414006

AND

comment java-1.6.0-sun-jdbc is earlier than 1:1.6.0.75-1jpp.3.el5_10
oval oval:com.redhat.rhsa:tst:20140414007
comment java-1.6.0-sun-jdbc is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414008

AND

comment java-1.6.0-sun-plugin is earlier than 1:1.6.0.75-1jpp.3.el5_10
oval oval:com.redhat.rhsa:tst:20140414009
comment java-1.6.0-sun-plugin is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414010

AND

comment java-1.6.0-sun-src is earlier than 1:1.6.0.75-1jpp.3.el5_10
oval oval:com.redhat.rhsa:tst:20140414011
comment java-1.6.0-sun-src is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414012

AND

comment Red Hat Enterprise Linux 6 is installed
oval oval:com.redhat.rhba:tst:20111656003

AND

comment java-1.6.0-sun is earlier than 1:1.6.0.75-1jpp.1.el6_5
oval oval:com.redhat.rhsa:tst:20140414014
comment java-1.6.0-sun is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414015

AND

comment java-1.6.0-sun-demo is earlier than 1:1.6.0.75-1jpp.1.el6_5
oval oval:com.redhat.rhsa:tst:20140414016
comment java-1.6.0-sun-demo is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414017

AND

comment java-1.6.0-sun-devel is earlier than 1:1.6.0.75-1jpp.1.el6_5
oval oval:com.redhat.rhsa:tst:20140414018
comment java-1.6.0-sun-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414019

AND

comment java-1.6.0-sun-jdbc is earlier than 1:1.6.0.75-1jpp.1.el6_5
oval oval:com.redhat.rhsa:tst:20140414020
comment java-1.6.0-sun-jdbc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414021

AND

comment java-1.6.0-sun-plugin is earlier than 1:1.6.0.75-1jpp.1.el6_5
oval oval:com.redhat.rhsa:tst:20140414022
comment java-1.6.0-sun-plugin is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414023

AND

comment java-1.6.0-sun-src is earlier than 1:1.6.0.75-1jpp.1.el6_5
oval oval:com.redhat.rhsa:tst:20140414024
comment java-1.6.0-sun-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414025

rhsa

id	RHSA-2014:0414
released	2014-04-17
severity	Important
title	RHSA-2014:0414: java-1.6.0-sun security update (Important)

rpms

java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10
java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5
java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10
java-1.6.0-sun-demo-1:1.6.0.75-1jpp.1.el6_5
java-1.6.0-sun-demo-1:1.6.0.75-1jpp.3.el5_10
java-1.6.0-sun-devel-1:1.6.0.75-1jpp.1.el6_5
java-1.6.0-sun-devel-1:1.6.0.75-1jpp.3.el5_10
java-1.6.0-sun-jdbc-1:1.6.0.75-1jpp.1.el6_5
java-1.6.0-sun-jdbc-1:1.6.0.75-1jpp.3.el5_10
java-1.6.0-sun-plugin-1:1.6.0.75-1jpp.1.el6_5
java-1.6.0-sun-plugin-1:1.6.0.75-1jpp.3.el5_10
java-1.6.0-sun-src-1:1.6.0.75-1jpp.1.el6_5
java-1.6.0-sun-src-1:1.6.0.75-1jpp.3.el5_10
java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el5_10
java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5
java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el5_10
java-1.7.0-ibm-demo-1:1.7.0.7.0-1jpp.1.el6_5
java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el5_10
java-1.7.0-ibm-devel-1:1.7.0.7.0-1jpp.1.el6_5
java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el5_10
java-1.7.0-ibm-jdbc-1:1.7.0.7.0-1jpp.1.el6_5
java-1.7.0-ibm-plugin-1:1.7.0.7.0-1jpp.1.el5_10
java-1.7.0-ibm-plugin-1:1.7.0.7.0-1jpp.1.el6_5
java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el5_10
java-1.7.0-ibm-src-1:1.7.0.7.0-1jpp.1.el6_5
java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5
java-1.6.0-ibm-accessibility-1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-demo-1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-demo-1:1.6.0.16.0-1jpp.1.el6_5
java-1.6.0-ibm-devel-1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-devel-1:1.6.0.16.0-1jpp.1.el6_5
java-1.6.0-ibm-javacomm-1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-javacomm-1:1.6.0.16.0-1jpp.1.el6_5
java-1.6.0-ibm-jdbc-1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-jdbc-1:1.6.0.16.0-1jpp.1.el6_5
java-1.6.0-ibm-plugin-1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-plugin-1:1.6.0.16.0-1jpp.1.el6_5
java-1.6.0-ibm-src-1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-src-1:1.6.0.16.0-1jpp.1.el6_5
java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0
java-1.7.1-ibm-demo-1:1.7.1.1.0-1jpp.2.el7_0
java-1.7.1-ibm-devel-1:1.7.1.1.0-1jpp.2.el7_0
java-1.7.1-ibm-jdbc-1:1.7.1.1.0-1jpp.2.el7_0
java-1.7.1-ibm-plugin-1:1.7.1.1.0-1jpp.2.el7_0
java-1.7.1-ibm-src-1:1.7.1.1.0-1jpp.2.el7_0
java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el5
java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6
java-1.6.0-ibm-devel-1:1.6.0.16.0-1jpp.1.el5
java-1.6.0-ibm-devel-1:1.6.0.16.0-1jpp.1.el6

refmap via4

bid	66870
confirm	http://www-01.ibm.com/support/docview.wss?uid=swg21672080 http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
gentoo	GLSA-201502-12
hp	HPSBUX03091 HPSBUX03092 SSRT101667 SSRT101668

Last major update

08-09-2020 - 13:00

Published

16-04-2014 - 02:55

Last modified

08-09-2020 - 13:00