ID CVE-2015-0437
Summary Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:jdk:1.8.0:update_25:*:*:*:*:*:*
    cpe:2.3:a:oracle:jdk:1.8.0:update_25:*:*:*:*:*:*
  • cpe:2.3:a:oracle:jre:1.8.0:update_25:*:*:*:*:*:*
    cpe:2.3:a:oracle:jre:1.8.0:update_25:*:*:*:*:*:*
  • cpe:2.3:o:novell:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*
    cpe:2.3:o:novell:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*
CVSS
Base: 9.3 (as of 08-09-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
redhat via4
advisories
  • bugzilla
    id 1183715
    title CVE-2014-6587 OpenJDK: MulticastSocket NULL pointer dereference (Libraries, 8056264)
    oval
    AND
    • OR
      • comment Red Hat Enterprise Linux 6 Client is installed
        oval oval:com.redhat.rhba:tst:20111656001
      • comment Red Hat Enterprise Linux 6 Server is installed
        oval oval:com.redhat.rhba:tst:20111656002
      • comment Red Hat Enterprise Linux 6 Workstation is installed
        oval oval:com.redhat.rhba:tst:20111656003
      • comment Red Hat Enterprise Linux 6 ComputeNode is installed
        oval oval:com.redhat.rhba:tst:20111656004
    • OR
      • AND
        • comment java-1.8.0-openjdk is earlier than 1:1.8.0.31-1.b13.el6_6
          oval oval:com.redhat.rhsa:tst:20150069005
        • comment java-1.8.0-openjdk is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20141636006
      • AND
        • comment java-1.8.0-openjdk-demo is earlier than 1:1.8.0.31-1.b13.el6_6
          oval oval:com.redhat.rhsa:tst:20150069007
        • comment java-1.8.0-openjdk-demo is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20141636012
      • AND
        • comment java-1.8.0-openjdk-devel is earlier than 1:1.8.0.31-1.b13.el6_6
          oval oval:com.redhat.rhsa:tst:20150069013
        • comment java-1.8.0-openjdk-devel is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20141636016
      • AND
        • comment java-1.8.0-openjdk-headless is earlier than 1:1.8.0.31-1.b13.el6_6
          oval oval:com.redhat.rhsa:tst:20150069015
        • comment java-1.8.0-openjdk-headless is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20141636008
      • AND
        • comment java-1.8.0-openjdk-javadoc is earlier than 1:1.8.0.31-1.b13.el6_6
          oval oval:com.redhat.rhsa:tst:20150069011
        • comment java-1.8.0-openjdk-javadoc is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20141636014
      • AND
        • comment java-1.8.0-openjdk-src is earlier than 1:1.8.0.31-1.b13.el6_6
          oval oval:com.redhat.rhsa:tst:20150069009
        • comment java-1.8.0-openjdk-src is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20141636010
    rhsa
    id RHSA-2015:0069
    released 2015-01-21
    severity Important
    title RHSA-2015:0069: java-1.8.0-openjdk security update (Important)
  • rhsa
    id RHSA-2015:0080
rpms
  • java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6
  • java-1.8.0-openjdk-demo-1:1.8.0.31-1.b13.el6_6
  • java-1.8.0-openjdk-devel-1:1.8.0.31-1.b13.el6_6
  • java-1.8.0-openjdk-headless-1:1.8.0.31-1.b13.el6_6
  • java-1.8.0-openjdk-javadoc-1:1.8.0.31-1.b13.el6_6
  • java-1.8.0-openjdk-src-1:1.8.0.31-1.b13.el6_6
refmap via4
bid 72146
confirm http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
gentoo GLSA-201603-11
sectrack 1031580
suse SUSE-SU-2015:0336
xf oracle-cpujan2015-cve20150437(100144)
Last major update 08-09-2017 - 01:29
Published 21-01-2015 - 19:59
Back to Top