CVE-2015-0491 - Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows

CVE-2015-0491

Summary

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0459.

References

Vulnerable Configurations

cpe:2.3:a:oracle:jdk:1.8.0:update40:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:update40:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update8:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update8:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update91:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update91:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.7.0:update76:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.7.0:update76:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.5.0:update81:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.5.0:update81:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.6.0:update91:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.6.0:update91:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7.0:update76:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7.0:update76:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update40:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update40:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:2.2.76:*:*:*:*:*:*:*
cpe:2.3:a:oracle:javafx:2.2.76:*:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

CVSS

Base:	10.0 (as of 13-05-2022 - 14:57)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

redhat via4

advisories

bugzilla

id	1211771
title	CVE-2015-0458 Oracle JDK: unspecified vulnerability fixed in 6u95, 7u79 and 8u45 (Deployment)

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 5 is installed
oval oval:com.redhat.rhba:tst:20070331005

AND

comment java-1.6.0-sun is earlier than 1:1.6.0.95-1jpp.3.el5_11
oval oval:com.redhat.rhsa:tst:20150858001
comment java-1.6.0-sun is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414002

AND

comment java-1.6.0-sun-demo is earlier than 1:1.6.0.95-1jpp.3.el5_11
oval oval:com.redhat.rhsa:tst:20150858003
comment java-1.6.0-sun-demo is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414004

AND

comment java-1.6.0-sun-devel is earlier than 1:1.6.0.95-1jpp.3.el5_11
oval oval:com.redhat.rhsa:tst:20150858005
comment java-1.6.0-sun-devel is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414006

AND

comment java-1.6.0-sun-jdbc is earlier than 1:1.6.0.95-1jpp.3.el5_11
oval oval:com.redhat.rhsa:tst:20150858007
comment java-1.6.0-sun-jdbc is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414008

AND

comment java-1.6.0-sun-plugin is earlier than 1:1.6.0.95-1jpp.3.el5_11
oval oval:com.redhat.rhsa:tst:20150858009
comment java-1.6.0-sun-plugin is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414010

AND

comment java-1.6.0-sun-src is earlier than 1:1.6.0.95-1jpp.3.el5_11
oval oval:com.redhat.rhsa:tst:20150858011
comment java-1.6.0-sun-src is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20140414012

AND

comment Red Hat Enterprise Linux 6 is installed
oval oval:com.redhat.rhba:tst:20111656003

AND

comment java-1.6.0-sun is earlier than 1:1.6.0.95-1jpp.3.el6_6
oval oval:com.redhat.rhsa:tst:20150858014
comment java-1.6.0-sun is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414015

AND

comment java-1.6.0-sun-demo is earlier than 1:1.6.0.95-1jpp.3.el6_6
oval oval:com.redhat.rhsa:tst:20150858016
comment java-1.6.0-sun-demo is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414017

AND

comment java-1.6.0-sun-devel is earlier than 1:1.6.0.95-1jpp.3.el6_6
oval oval:com.redhat.rhsa:tst:20150858018
comment java-1.6.0-sun-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414019

AND

comment java-1.6.0-sun-jdbc is earlier than 1:1.6.0.95-1jpp.3.el6_6
oval oval:com.redhat.rhsa:tst:20150858020
comment java-1.6.0-sun-jdbc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414021

AND

comment java-1.6.0-sun-plugin is earlier than 1:1.6.0.95-1jpp.3.el6_6
oval oval:com.redhat.rhsa:tst:20150858022
comment java-1.6.0-sun-plugin is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414023

AND

comment java-1.6.0-sun-src is earlier than 1:1.6.0.95-1jpp.3.el6_6
oval oval:com.redhat.rhsa:tst:20150858024
comment java-1.6.0-sun-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414025

AND

comment Red Hat Enterprise Linux 7 is installed
oval oval:com.redhat.rhba:tst:20150364027

AND

comment java-1.6.0-sun is earlier than 1:1.6.0.95-1jpp.3.el7_1
oval oval:com.redhat.rhsa:tst:20150858027
comment java-1.6.0-sun is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414015

AND

comment java-1.6.0-sun-demo is earlier than 1:1.6.0.95-1jpp.3.el7_1
oval oval:com.redhat.rhsa:tst:20150858028
comment java-1.6.0-sun-demo is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414017

AND

comment java-1.6.0-sun-devel is earlier than 1:1.6.0.95-1jpp.3.el7_1
oval oval:com.redhat.rhsa:tst:20150858029
comment java-1.6.0-sun-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414019

AND

comment java-1.6.0-sun-jdbc is earlier than 1:1.6.0.95-1jpp.3.el7_1
oval oval:com.redhat.rhsa:tst:20150858030
comment java-1.6.0-sun-jdbc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414021

AND

comment java-1.6.0-sun-plugin is earlier than 1:1.6.0.95-1jpp.3.el7_1
oval oval:com.redhat.rhsa:tst:20150858031
comment java-1.6.0-sun-plugin is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414023

AND

comment java-1.6.0-sun-src is earlier than 1:1.6.0.95-1jpp.3.el7_1
oval oval:com.redhat.rhsa:tst:20150858032
comment java-1.6.0-sun-src is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20140414025

rhsa

id	RHSA-2015:0858
released	2015-04-20
severity	Important
title	RHSA-2015:0858: java-1.6.0-sun security update (Important)

rhsa
id RHSA-2015:0854
rhsa
id RHSA-2015:0857
rhsa
id RHSA-2015:1006
rhsa
id RHSA-2015:1007
rhsa
id RHSA-2015:1020
rhsa
id RHSA-2015:1021
rhsa
id RHSA-2015:1091

rpms

java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6
java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1
java-1.8.0-oracle-devel-1:1.8.0.45-1jpp.2.el6_6
java-1.8.0-oracle-devel-1:1.8.0.45-1jpp.2.el7_1
java-1.8.0-oracle-javafx-1:1.8.0.45-1jpp.2.el6_6
java-1.8.0-oracle-javafx-1:1.8.0.45-1jpp.2.el7_1
java-1.8.0-oracle-jdbc-1:1.8.0.45-1jpp.2.el6_6
java-1.8.0-oracle-jdbc-1:1.8.0.45-1jpp.2.el7_1
java-1.8.0-oracle-plugin-1:1.8.0.45-1jpp.2.el6_6
java-1.8.0-oracle-plugin-1:1.8.0.45-1jpp.2.el7_1
java-1.8.0-oracle-src-1:1.8.0.45-1jpp.2.el6_6
java-1.8.0-oracle-src-1:1.8.0.45-1jpp.2.el7_1
java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11
java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6
java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1
java-1.7.0-oracle-devel-1:1.7.0.79-1jpp.1.el5_11
java-1.7.0-oracle-devel-1:1.7.0.79-1jpp.1.el6_6
java-1.7.0-oracle-devel-1:1.7.0.79-1jpp.1.el7_1
java-1.7.0-oracle-javafx-1:1.7.0.79-1jpp.1.el5_11
java-1.7.0-oracle-javafx-1:1.7.0.79-1jpp.1.el6_6
java-1.7.0-oracle-javafx-1:1.7.0.79-1jpp.1.el7_1
java-1.7.0-oracle-jdbc-1:1.7.0.79-1jpp.1.el5_11
java-1.7.0-oracle-jdbc-1:1.7.0.79-1jpp.1.el6_6
java-1.7.0-oracle-jdbc-1:1.7.0.79-1jpp.1.el7_1
java-1.7.0-oracle-plugin-1:1.7.0.79-1jpp.1.el5_11
java-1.7.0-oracle-plugin-1:1.7.0.79-1jpp.1.el6_6
java-1.7.0-oracle-plugin-1:1.7.0.79-1jpp.1.el7_1
java-1.7.0-oracle-src-1:1.7.0.79-1jpp.1.el5_11
java-1.7.0-oracle-src-1:1.7.0.79-1jpp.1.el6_6
java-1.7.0-oracle-src-1:1.7.0.79-1jpp.1.el7_1
java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11
java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6
java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1
java-1.6.0-sun-demo-1:1.6.0.95-1jpp.3.el5_11
java-1.6.0-sun-demo-1:1.6.0.95-1jpp.3.el6_6
java-1.6.0-sun-demo-1:1.6.0.95-1jpp.3.el7_1
java-1.6.0-sun-devel-1:1.6.0.95-1jpp.3.el5_11
java-1.6.0-sun-devel-1:1.6.0.95-1jpp.3.el6_6
java-1.6.0-sun-devel-1:1.6.0.95-1jpp.3.el7_1
java-1.6.0-sun-jdbc-1:1.6.0.95-1jpp.3.el5_11
java-1.6.0-sun-jdbc-1:1.6.0.95-1jpp.3.el6_6
java-1.6.0-sun-jdbc-1:1.6.0.95-1jpp.3.el7_1
java-1.6.0-sun-plugin-1:1.6.0.95-1jpp.3.el5_11
java-1.6.0-sun-plugin-1:1.6.0.95-1jpp.3.el6_6
java-1.6.0-sun-plugin-1:1.6.0.95-1jpp.3.el7_1
java-1.6.0-sun-src-1:1.6.0.95-1jpp.3.el5_11
java-1.6.0-sun-src-1:1.6.0.95-1jpp.3.el6_6
java-1.6.0-sun-src-1:1.6.0.95-1jpp.3.el7_1
java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el5
java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6
java-1.6.0-ibm-accessibility-1:1.6.0.16.4-1jpp.1.el5
java-1.6.0-ibm-demo-1:1.6.0.16.4-1jpp.1.el5
java-1.6.0-ibm-demo-1:1.6.0.16.4-1jpp.1.el6_6
java-1.6.0-ibm-devel-1:1.6.0.16.4-1jpp.1.el5
java-1.6.0-ibm-devel-1:1.6.0.16.4-1jpp.1.el6_6
java-1.6.0-ibm-javacomm-1:1.6.0.16.4-1jpp.1.el5
java-1.6.0-ibm-javacomm-1:1.6.0.16.4-1jpp.1.el6_6
java-1.6.0-ibm-jdbc-1:1.6.0.16.4-1jpp.1.el5
java-1.6.0-ibm-jdbc-1:1.6.0.16.4-1jpp.1.el6_6
java-1.6.0-ibm-plugin-1:1.6.0.16.4-1jpp.1.el5
java-1.6.0-ibm-plugin-1:1.6.0.16.4-1jpp.1.el6_6
java-1.6.0-ibm-src-1:1.6.0.16.4-1jpp.1.el5
java-1.6.0-ibm-src-1:1.6.0.16.4-1jpp.1.el6_6
java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5
java-1.7.0-ibm-demo-1:1.7.0.9.0-1jpp.1.el5
java-1.7.0-ibm-devel-1:1.7.0.9.0-1jpp.1.el5
java-1.7.0-ibm-jdbc-1:1.7.0.9.0-1jpp.1.el5
java-1.7.0-ibm-plugin-1:1.7.0.9.0-1jpp.1.el5
java-1.7.0-ibm-src-1:1.7.0.9.0-1jpp.1.el5
java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.ael7b_1
java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6
java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1
java-1.7.1-ibm-demo-1:1.7.1.3.0-1jpp.2.ael7b_1
java-1.7.1-ibm-demo-1:1.7.1.3.0-1jpp.2.el6_6
java-1.7.1-ibm-demo-1:1.7.1.3.0-1jpp.2.el7_1
java-1.7.1-ibm-devel-1:1.7.1.3.0-1jpp.2.ael7b_1
java-1.7.1-ibm-devel-1:1.7.1.3.0-1jpp.2.el6_6
java-1.7.1-ibm-devel-1:1.7.1.3.0-1jpp.2.el7_1
java-1.7.1-ibm-jdbc-1:1.7.1.3.0-1jpp.2.ael7b_1
java-1.7.1-ibm-jdbc-1:1.7.1.3.0-1jpp.2.el6_6
java-1.7.1-ibm-jdbc-1:1.7.1.3.0-1jpp.2.el7_1
java-1.7.1-ibm-plugin-1:1.7.1.3.0-1jpp.2.el6_6
java-1.7.1-ibm-plugin-1:1.7.1.3.0-1jpp.2.el7_1
java-1.7.1-ibm-src-1:1.7.1.3.0-1jpp.2.ael7b_1
java-1.7.1-ibm-src-1:1.7.1.3.0-1jpp.2.el6_6
java-1.7.1-ibm-src-1:1.7.1.3.0-1jpp.2.el7_1
java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el5
java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6
java-1.5.0-ibm-accessibility-1:1.5.0.16.10-1jpp.1.el5
java-1.5.0-ibm-demo-1:1.5.0.16.10-1jpp.1.el5
java-1.5.0-ibm-demo-1:1.5.0.16.10-1jpp.1.el6_6
java-1.5.0-ibm-devel-1:1.5.0.16.10-1jpp.1.el5
java-1.5.0-ibm-devel-1:1.5.0.16.10-1jpp.1.el6_6
java-1.5.0-ibm-javacomm-1:1.5.0.16.10-1jpp.1.el5
java-1.5.0-ibm-javacomm-1:1.5.0.16.10-1jpp.1.el6_6
java-1.5.0-ibm-jdbc-1:1.5.0.16.10-1jpp.1.el5
java-1.5.0-ibm-jdbc-1:1.5.0.16.10-1jpp.1.el6_6
java-1.5.0-ibm-plugin-1:1.5.0.16.10-1jpp.1.el5
java-1.5.0-ibm-plugin-1:1.5.0.16.10-1jpp.1.el6_6
java-1.5.0-ibm-src-1:1.5.0.16.10-1jpp.1.el5
java-1.5.0-ibm-src-1:1.5.0.16.10-1jpp.1.el6_6
java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el5
java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6
java-1.6.0-ibm-devel-1:1.6.0.16.4-1jpp.1.el5
java-1.6.0-ibm-devel-1:1.6.0.16.4-1jpp.1.el6_6

refmap via4

bid	74094
confirm	http://www-01.ibm.com/support/docview.wss?uid=swg21883640 http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
gentoo	GLSA-201603-11
sectrack	1032120
suse	SUSE-SU-2015:0833 SUSE-SU-2015:1085 SUSE-SU-2015:1086 SUSE-SU-2015:1138 SUSE-SU-2015:1161 SUSE-SU-2015:2166 SUSE-SU-2015:2168 SUSE-SU-2015:2182 SUSE-SU-2015:2192 SUSE-SU-2015:2216 SUSE-SU-2016:0113 openSUSE-SU-2015:0773 openSUSE-SU-2015:0774

Last major update

13-05-2022 - 14:57

Published

16-04-2015 - 16:59

Last modified

13-05-2022 - 14:57