CVE-2014-6562 - Unspecified vulnerability in Oracle Java SE 8u20 allows remote attackers to affect confidentiality,

CVE-2014-6562

Summary

Unspecified vulnerability in Oracle Java SE 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

References

Vulnerable Configurations

cpe:2.3:a:oracle:jdk:1.8.0:update20:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:update20:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update_20:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update_20:*:*:*:*:*:*

CVSS

Base:	9.3 (as of 08-09-2020 - 12:29)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:M/Au:N/C:C/I:C/A:C

redhat via4

advisories

bugzilla

id	1152049
title	CVE-2014-6468 OpenJDK: insufficient SharedArchiveFile checks (Hotspot, 8044269)

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 6 is installed
oval oval:com.redhat.rhba:tst:20111656003

AND

comment java-1.8.0-openjdk is earlier than 0:1.8.0.25-1.b17.el6
oval oval:com.redhat.rhsa:tst:20141636001
comment java-1.8.0-openjdk is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20141636002

AND

comment java-1.8.0-openjdk-demo is earlier than 0:1.8.0.25-1.b17.el6
oval oval:com.redhat.rhsa:tst:20141636003
comment java-1.8.0-openjdk-demo is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20141636004

AND

comment java-1.8.0-openjdk-devel is earlier than 0:1.8.0.25-1.b17.el6
oval oval:com.redhat.rhsa:tst:20141636005
comment java-1.8.0-openjdk-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20141636006

AND

comment java-1.8.0-openjdk-headless is earlier than 0:1.8.0.25-1.b17.el6
oval oval:com.redhat.rhsa:tst:20141636007
comment java-1.8.0-openjdk-headless is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20141636008

AND

comment java-1.8.0-openjdk-javadoc is earlier than 0:1.8.0.25-1.b17.el6
oval oval:com.redhat.rhsa:tst:20141636009
comment java-1.8.0-openjdk-javadoc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20141636010

AND

comment java-1.8.0-openjdk-src is earlier than 0:1.8.0.25-1.b17.el6
oval oval:com.redhat.rhsa:tst:20141636011
comment java-1.8.0-openjdk-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20141636012

rhsa

id	RHSA-2014:1636
released	2014-10-15
severity	Important
title	RHSA-2014:1636: java-1.8.0-openjdk security update (Important)

rpms

java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6
java-1.8.0-openjdk-debuginfo-0:1.8.0.25-1.b17.el6
java-1.8.0-openjdk-demo-0:1.8.0.25-1.b17.el6
java-1.8.0-openjdk-devel-0:1.8.0.25-1.b17.el6
java-1.8.0-openjdk-headless-0:1.8.0.25-1.b17.el6
java-1.8.0-openjdk-javadoc-0:1.8.0.25-1.b17.el6
java-1.8.0-openjdk-src-0:1.8.0.25-1.b17.el6

refmap via4

bid	70523
confirm	http://linux.oracle.com/errata/ELSA-2014-1636 http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
gentoo	GLSA-201502-12
secunia	60416 61609 61928

Last major update

08-09-2020 - 12:29

Published

15-10-2014 - 22:55

Last modified

08-09-2020 - 12:29