ID CVE-2014-6562
Summary Unspecified vulnerability in Oracle Java SE 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:jdk:1.8.0:update_20:*:*:*:*:*:*
    cpe:2.3:a:oracle:jdk:1.8.0:update_20:*:*:*:*:*:*
  • cpe:2.3:a:oracle:jre:1.8.0:update_20:*:*:*:*:*:*
    cpe:2.3:a:oracle:jre:1.8.0:update_20:*:*:*:*:*:*
CVSS
Base: 9.3 (as of 21-02-2015 - 03:01)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
redhat via4
advisories
bugzilla
id 1152049
title CVE-2014-6468 OpenJDK: insufficient SharedArchiveFile checks (Hotspot, 8044269)
oval
AND
  • OR
    • comment Red Hat Enterprise Linux 6 Client is installed
      oval oval:com.redhat.rhba:tst:20111656001
    • comment Red Hat Enterprise Linux 6 Server is installed
      oval oval:com.redhat.rhba:tst:20111656002
    • comment Red Hat Enterprise Linux 6 Workstation is installed
      oval oval:com.redhat.rhba:tst:20111656003
    • comment Red Hat Enterprise Linux 6 ComputeNode is installed
      oval oval:com.redhat.rhba:tst:20111656004
  • OR
    • AND
      • comment java-1.8.0-openjdk is earlier than 0:1.8.0.25-1.b17.el6
        oval oval:com.redhat.rhsa:tst:20141636005
      • comment java-1.8.0-openjdk is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20141636006
    • AND
      • comment java-1.8.0-openjdk-demo is earlier than 0:1.8.0.25-1.b17.el6
        oval oval:com.redhat.rhsa:tst:20141636011
      • comment java-1.8.0-openjdk-demo is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20141636012
    • AND
      • comment java-1.8.0-openjdk-devel is earlier than 0:1.8.0.25-1.b17.el6
        oval oval:com.redhat.rhsa:tst:20141636015
      • comment java-1.8.0-openjdk-devel is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20141636016
    • AND
      • comment java-1.8.0-openjdk-headless is earlier than 0:1.8.0.25-1.b17.el6
        oval oval:com.redhat.rhsa:tst:20141636007
      • comment java-1.8.0-openjdk-headless is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20141636008
    • AND
      • comment java-1.8.0-openjdk-javadoc is earlier than 0:1.8.0.25-1.b17.el6
        oval oval:com.redhat.rhsa:tst:20141636013
      • comment java-1.8.0-openjdk-javadoc is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20141636014
    • AND
      • comment java-1.8.0-openjdk-src is earlier than 0:1.8.0.25-1.b17.el6
        oval oval:com.redhat.rhsa:tst:20141636009
      • comment java-1.8.0-openjdk-src is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20141636010
rhsa
id RHSA-2014:1636
released 2014-10-14
severity Important
title RHSA-2014:1636: java-1.8.0-openjdk security update (Important)
rpms
  • java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6
  • java-1.8.0-openjdk-demo-0:1.8.0.25-1.b17.el6
  • java-1.8.0-openjdk-devel-0:1.8.0.25-1.b17.el6
  • java-1.8.0-openjdk-headless-0:1.8.0.25-1.b17.el6
  • java-1.8.0-openjdk-javadoc-0:1.8.0.25-1.b17.el6
  • java-1.8.0-openjdk-src-0:1.8.0.25-1.b17.el6
refmap via4
bid 70523
confirm
gentoo GLSA-201502-12
secunia
  • 60416
  • 61609
  • 61928
Last major update 21-02-2015 - 03:01
Published 15-10-2014 - 22:55
Back to Top